| What it does | Free security scanning for apps built with AI
| AI security for chatbots, RAG systems, and agentic workflows
|
|---|
| Stage | MVP
| Not given
|
|---|
| Founded | Not given
| Not given
|
|---|
| Based in | SG
| Not given
|
|---|
| Pricing model | Free
| Not given
|
|---|
| Pricing | Free during early access, 5 scans a day
| Not given
|
|---|
| Key features | - 55 security checks for common AI-built app mistakes
- Package dependency vulnerability checking
- GitHub integration and ZIP upload
- AI tool fix prompts for Cursor and Claude Code
- File and line number location for each finding
- Plain language security explanations
- Report persistence and code deletion
- Coverage for JavaScript, TypeScript and Python
| - Intent envelope specification with open JSON Schema
- Multi-turn jailbreak and injection testing across web, mobile, and voice
- Deterministic execution boundary enforcing tool allowlists
- Human-in-the-loop escalation for high-impact actions
- Identity and credential separation per agent
- Supervisor check for independent action validation
- Free AI attack surface assessment tool
- Findings mapped to OWASP, MITRE ATLAS, and NIST AI RMF
|
|---|
| What makes it different | - Deterministic checks that give the same results every time, not variable AI answers
- No AI reads your code during scanning
- Reports designed for people who built the app, not security engineers
- Free with nothing hidden during early access
- Transparent about scan limitations in every report
| - Open-source intent envelope specification implementable with own engineers
- Calibrated defenses from red team findings rather than off-the-shelf policies
- Findings carried through to runtime controls and access changes, not just reports
|
| Community votes | 0 | 0 |
| DR (Domain Rating by Ahrefs) | 2 ▲ +1 (up) since last check | 1 ▲ +1 (up) since last check |
| Trust Flow (Majestic) | 6 | 0 |
| Citation Flow (Majestic) | 25 | 12 |
| Referring domains (Majestic) | 16 | 1 |