Documentation

Quick Start

1. Step 1

   Sign up and create a workspace

   Create your account and set up your first workspace. You get a free tier with 1 repo and 5 scans/month.

2. Step 2

   Connect your integrations

   Link your GitHub repos with a personal access token. Optionally connect AWS with a cross-account IAM role ARN.

3. Step 3

   Run your first scan

   Trigger a full scan from the dashboard or use the CLI: npx @sec/cli scan --repo owner/repo

4. Step 4

   Review findings

   Findings are prioritized by AI-computed risk scores. Use filters to focus on critical and high severity issues.

5. Step 5

   Set up CI/CD gating

   Add the CLI to your CI pipeline to block merges with critical vulnerabilities: npx @sec/cli scan --fail-on critical

Architecture

┌─────────────┐     ┌─────────────┐     ┌──────────────┐
│   Web App   │────▶│  Fastify API │────▶│ PostgreSQL   │
│  (Next.js)  │     │  (Node.js)   │     │  (Drizzle)   │
└─────────────┘     └──────┬──────┘     └──────────────┘
                           │
                    ┌──────▼──────┐     ┌──────────────┐
                    │   Workers   │────▶│  SQS / Redis │
                    │  (Node.js)  │     └──────────────┘
                    └──────┬──────┘
                           │
                    ┌──────▼──────┐     ┌──────────────┐
                    │  AI Runtime │────▶│  LLM (Claude)│
                    │  (FastAPI)  │     └──────────────┘
                    └─────────────┘

API Reference

The sec platform exposes a RESTful API with OpenAPI documentation. All endpoints require authentication via API key or JWT.

CLI Usage

Compliance Frameworks