descry — we build what watches them

swain — scanning launch-risk surfaces

files

findings

fix first

swain → initialising…

profile

scan

analyze

fix first

i the lab

we build what watches the machines.

the machines write the code now. descry builds the open-source instruments that make their work legible — and stoppable. swain is the first: local security review, one command before you ship.

runs locally fix first no new accounts open source

$ curl -fsSL …/install.sh | sh

$ swain demo // no quota

ii swain — what it covers

authsessions, tokens, privilege

billingpayment trust, webhooks

uploadspath handling, tenant boundary

secretshardcoded values, env handling

sqlinjection, parameterisation

xssinnerHTML, unsafe rendering

tenantobject-level auth, isolation