Skip to content

Code Audit

Hunt vulnerabilities with AI agents.

Upload your source code as a ZIP. AI agents audit it in the cloud and turn what they find into traceable findings and audit-ready reports.

Open sec.transplane.sg

Upload a ZIP.

Create a project and upload your source archive. Tasks, findings and reports stay tied to that project.

Agents audit in the cloud.

  • Nothing to install locally. Audits run in the cloud.
  • Finds common risks such as SQL injection, XSS, SSRF, command injection, path traversal, authorization flaws and hardcoded secrets.

Findings you can trace.

  • Every finding shows its type, severity, location, code evidence and how to fix it.
  • Your code is used only for the audits you start and is not used to train public models.
Open sec.transplane.sg

How it works

Code Audit runs security audits in the cloud. Instead of setting up scanners and rules, you upload a source archive and AI agents do the hunting.

  1. Create a project and upload a ZIP. Tasks, findings and reports stay tied to that project.
  2. Choose the analysis type, flexible or full, and start the audit.
  3. Review findings by severity, open the details, and download a single-finding report or the full report.

What it finds

Common code security risks, including SQL injection, XSS, SSRF, command injection, path traversal, authorization flaws, hardcoded secrets and insecure configuration.

What a report contains

Each finding includes the vulnerability type, severity, affected location, evidence snippets, confidence and remediation guidance. You can review it online or download it for handoff and archiving.

Your source code

Source code is used only for the audits you start, for generating their results and for report downloads. It is not published, sold or shared, and it is not used to train public models. Files and reports stay under your control until you delete them or close your account.

For teams

The external API lets you start audits from CI/CD with dedicated API keys.

Resources