How it works

1. Create an account

2. Give it your code

Either upload a single file or an archive (zip, tar, tar.gz or tar.bz2), or connect GitHub and scan a branch of a repository you choose. Files that are not source code, such as binaries and very large generated files, are skipped, and the report says so.

3. See the price

You are shown the price for your own document or code before anything is charged, and you decide whether to pay. Your first 3 runs on the site are free (limited in size). If you go ahead, the review starts.

4. Wait for the report

You can leave the page and come back. Small projects usually finish in a few minutes; large ones take longer.

5. Read and download

Each finding gives the location, a failure scenario and a fix. The report also says which files were covered and which were skipped. Download it as Markdown or HTML. The report is deleted after both downloads, when you press Delete now, and in any case within 24 hours.

Optional: save data to my repo

If you turn it on, we write encrypted files to a branch named provesw in your repository. They hold a record that later reviews of the same repository can use. You can delete the branch whenever you like. Nothing is written to your repository unless you turn this on.

See Security and privacy for what we keep and what we do not.