Code, dependencies, secrets and infrastructure config, scanned locally or in CI. Evidence for every finding. One concise pull-request check, not dozens of bot comments.
Scan any repository in one command:
yaksecure scan --upload-resultsAn open scanner and rule format. Write rules in YAML, test them like code, and run the whole engine locally with no account at all.
The scanner runs on your machine or your CI. Source never has to leave your infrastructure for you to get results.
Data-flow analysis shows the path from input to sink. Dependency findings say whether the vulnerable code is actually reachable from yours.
Never per developer, so you can give the whole team read access without a bill for it.
£0/mo
1 repositories
Open-source CLI, community rule packs, local SAST/secrets/IaC, unlimited developers.
£99/mo
20 repositories
SAST, SCA, secrets, IaC, PR gating, IDE plugins, SBOMs. Unlimited read-only users.
£299/mo
100 repositories
Container scanning, DAST allowance, custom rule packs, SSO, customer-managed runners.
Talk to us
Unlimited repositories
Self-managed SCM, SAML/SCIM, regional/air-gapped deployment, compliance evidence, SLA.