| What it does | Pre-deployment security scanner for web apps, APIs, and backends
| Open-source CI/CD observability platform for monitoring software delivery pipelines
|
|---|
| Stage | Not given
| Not given
|
|---|
| Founded | Not given
| Not given
|
|---|
| Based in | Not given
| FR
|
|---|
| Pricing model | Freemium
| Freemium
|
|---|
| Pricing | Free: $0 with 3 security scans, command checker (unlimited), AI fix prompts, no signup required. Pro: $9.99/month with unlimited security scans, priority scans, everything in Free, and priority support.
| Community: Free forever (open-source, self-hosted). Cloud: €20/month (managed service, 14-day free trial). Pro: €200/month (self-hosted with professional support). All prices exclude VAT and are billed per organization.
|
|---|
| Key features | - Exposed .env and config file detection
- Open database port scanning
- Security header analysis
- CORS misconfiguration detection
- Cookie security analysis
- Git repository exposure detection
- Backup file exposure detection
- Source map exposure detection
- Terminal command security checker
- CDN-aware scanning
| - Event collection from GitHub, GitLab, Jenkins, Kubernetes, ArgoCD and 20+ sources
- DORA metrics dashboards with deployment frequency, lead time, time to restore, and change failure rate
- Artifact timeline showing which version is deployed where and when
- Pipeline and test run monitoring with flaky test detection
- Incidents and tickets tracking with time-to-restore metrics
- PostgreSQL and TimescaleDB storage with plain SQL querying
- Event-driven automation via HTTP, NATS, or Kafka sinks
- Customizable Grafana dashboards for team workflow
- Cross-repository pipeline visibility across all CI/CD tools
- CDEvents standard-based event normalization with no vendor lock-in
|
|---|
| What makes it different | - Scans live deployments from the outside like an attacker would see them
- Non-intrusive read-only checks that don't modify or exploit systems
- Catches deployment-specific issues that source code scanners miss
- Free with no signup required for initial scans
| - Built on open CDEvents standard with both push and pull data collection, not proprietary APIs
- Full data ownership with self-hosted option storing events in your own PostgreSQL
- Open-source with Apache 2.0 license and no lock-in, keeping access to components even after canceling
- Works with existing tools without requiring workflow changes
- Same event stream powers both dashboards and downstream workflow automation
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | 3 ● no change since last check | 10 ● no change since last check |
|---|
| Trust Flow (Majestic) | 10 | 7 |
|---|
| Citation Flow (Majestic) | 18 | 27 |
|---|
| Referring domains (Majestic) | 54 | 20 |
|---|
CDviz