How it works
Code Audit runs security audits in the cloud. Instead of setting up scanners and rules, you upload a source archive and AI agents do the hunting.
- Create a project and upload a ZIP. Tasks, findings and reports stay tied to that project.
- Choose the analysis type, flexible or full, and start the audit.
- Review findings by severity, open the details, and download a single-finding report or the full report.
What it finds
Common code security risks, including SQL injection, XSS, SSRF, command injection, path traversal, authorization flaws, hardcoded secrets and insecure configuration.
What a report contains
Each finding includes the vulnerability type, severity, affected location, evidence snippets, confidence and remediation guidance. You can review it online or download it for handoff and archiving.
Your source code
Source code is used only for the audits you start, for generating their results and for report downloads. It is not published, sold or shared, and it is not used to train public models. Files and reports stay under your control until you delete them or close your account.
For teams
The external API lets you start audits from CI/CD with dedicated API keys.
Start at sec.transplane.sg.