01 · CONNECT
Connect a repo
GitHub OAuth, read-only, two minutes — or drop a zip, or paste a snippet. We never touch a commit, we only read what’s already there.
Forensic security scanningPut your code
Put your code
under the light.
Deadbolt scans your repo like a forensics lab — SAST, dependency audit, secrets sweep, and an AI-code risk read — in under five minutes. You get a dossier, not a wall of noise.
$github.com/you/repo
RUN THE SCANOWASP-mapped·CWE-tagged·free tier, no card
storefrontrepo@a1b4c9
VERIFIED BY DEADBOLT
B
Critical 1
High 1
Fixed 1
SCANNED 2026-06-02DEADBOLT.DEV
45%
of AI-generated code ships with at least one known vulnerability
2.3×
more findings flagged in AI-authored spans than hand-written code
91%
fix acceptance rate once a finding names its exact evidence line
HOW THE SCAN WORKS
Three instruments. Five minutes.
02 · SWEEP
We sweep every file
SAST, a dependency audit, a secrets sweep, and an AI-code risk read — each finding numbered, CWE-tagged, and pinned to a line.
03 · SEE THE DOSSIER
You get the dossier
A grade, a risk score, and evidence for every finding — send it to a client, an investor, an auditor. Proof of diligence with your name on it.
PRICING
Hard caps. No surprises.
Free
$0
3 scans / month
- Public repos & public results
- SAST + dependency audit
- Shareable scorecard
- Community support
Pro
$29 /mo
50 scans / month
- Private repositories
- Secrets sweep + AI-differential
- REST API access
- Slack & email alerts
Team
$99 /mo
Unlimited scans · 3 seats
- Everything in Pro
- GitHub Actions gate
- Audit log & roles
- Priority remediation
Enterprise
Custom
On-prem & air-gapped
- Self-hosted scan sandbox
- SSO / SAML
- SLA & dedicated support
- Custom rule packs
Per-scan overage never surprises you — hard caps, your call.
“Found a hardcoded key in an app we shipped last week — before a client did.”
R. OYELARAN · STAFF ENGINEER, 3 REPOS SCANNED
Throw the bolt.
One repo. Five minutes. Every finding traced to a line, with the evidence to prove it.
Scan a repo