Continuous security review
CloseBug reads your code the way an attacker would — reachable dependencies, secrets, infrastructure and AI-model risk — then tells you plainly what it checked and what it could not.
Runs in CI, on the server, and on a laptop before the push
Scan · dvna
40s
55 findings
1 critical · 22 high · 17 medium · 15 low
Coverage
How it works
01 — Triage
Deterministic patterns and function-level reachability find the issues; an AI judge dismisses the noise and records why. What is left is what is real.
02 — Remediate
Every confirmed finding carries a fix — a template when the answer is always the same, an AI-authored patch when it is not. You review and accept; nothing merges itself.
03 — Learn
When the deep analysis catches something the rules missed, it proposes a new detection pattern. Tomorrow's scan is sharper than today's.
Honest coverage
Every scan records which checks ran, which were skipped and which failed, with the reason. An incomplete scan is shown as incomplete and blocks the CI gate — it never passes as clean.
Scan · closebug/api
Incomplete
Install the GitHub App, commit, and push. The first full scan queues automatically, and findings appear in the dashboard within a minute.