CodeAudit
CodeAudit · Architectural & Security Review

Architectural & security audits,
delivered in five minutes.

Paste a public GitHub URL. We clone it in an isolated sandbox, read it with Claude, and email you a grounded report with ranked findings, an executive grade, and a signed deletion receipt — all for one $10 charge.

Start an audit · $10How it works
Auto-refund on failureClones deleted within the hourSigned deletion receiptsNo-train data settings
Sample finding · F-001
mediumconfidence: high

Unescaped separator in regex alternation

A separator string with regex metacharacters silently produces broken slugs. Failures are silent: no exception is thrown.

index.js:14–20
const removeMootSeparators = (string, separator) => {
const escapedSeparator = escapeStringRegexp(separator);
…
groundedcitation verified against original source

Grounded findings only

Every finding cites a real file and line range. Ungrounded claims are filtered before delivery — no hallucinated bugs, no made-up CVEs, no advice the model couldn’t back up with code.

Cloned, read, deleted

Your repo is cloned to a sandboxed scratch volume, read once, and wiped within 60 minutes. We email you an HMAC-signed deletion receipt you can verify cryptographically at /verify.

Auto-refund on failure

If the pipeline can’t complete the audit for any reason, your $10 is refunded automatically via Stripe. You never pay for a report that didn’t ship.

Pipeline

Six stages, one quiet hour.

Everything happens between your $10 payment and the report email. You don’t need to keep a tab open.

  1. 01

    Clone

    Shallow git clone into a tmpfs scratch dir, read-only mounts elsewhere.

  2. 02

    Filter

    Drop vendor, build, lockfiles, minified, generated, binary content. Hard caps applied.

  3. 03

    Triage

    Claude Haiku ranks every remaining file by importance. Heuristic fallback if rate-limited.

  4. 04

    Skim

    Claude Sonnet reads the ranked files and produces findings, grade, and an exec summary.

  5. 05

    Ground

    Each finding's citation is verified against the source. Ungrounded claims dropped.

  6. 06

    Render

    Report HTML written, scratch volume wiped, deletion receipt signed and emailed.

Single charge · no subscription

Ten dollars. One audit. One email.

We charge once when the audit is queued. If it fails, we refund. No usage tiers, no token meters, no gotchas.

Start an audit