PRE-RELEASE · EARLY ACCESS CONSULTATIONS ARE OPEN

ASSESSMENT OPTIONS

Choose the evidence path that matches the system you can safely provide.

The proposed assessment modes cover source-only analysis, controlled runtime testing, combined validation, and targeted rechecks. Every path requires authorization and agreed scope.

01

Code security review

For teams that can provide an authorized repository but do not want a live environment touched.

  • Authorization and business-logic review
  • Tainted data flow and dangerous sink analysis
  • Secrets, dependency, license, and infrastructure-as-code signals
02

Black-box assessment

For a reachable staging or approved production surface where the system must be evaluated from the outside.

  • Web and REST API attack-surface mapping
  • Authenticated and unauthenticated paths
  • No source access required
03

White-box validation

For teams that can provide both source context and a reachable approved target.

  • Static candidates paired with runtime evidence
  • Attack-path and permission-model reasoning
  • More context for remediation

SCOPED EARLY ACCESS

Tell us what you need to assess—and what must stay untouched.

Discuss your use case