THE OPEN TOOLKIT / 2 TOOLS
Free CI & Build Security Tools
GitHub Actions workflows and Dockerfiles. Inspect the permissions, sources, and build decisions that are easy to miss.
Free to use. No account. Local reviews. Optional AI summaries.
THE TOOLKIT
Find the right check.
Search by task, technology, or file format.
Every tool explains its limits. Local reviews stay on your device; online lookups and optional AI explain what is sent.
CI and build security
GitHub Actions YAML
GitHub Actions review
Review workflow permissions, action pinning, privileged triggers, and untrusted expressions before they reach your build.
Dockerfile
Dockerfile review
Check base-image references, runtime user declarations, installation patterns, and secret-bearing build settings.
Explore
All tools
The full toolkit. No signup.
Free security toolsSupply chain
Dependencies, lockfiles, software inventories, package registries, and artifact integrity.
Supply chainApplication security
JavaScript, browser extensions, tokens, response headers, and URLs.
Application securityAI and agent security
Review the instructions and capabilities you give an AI agent.
AI and agent securityNetwork and domains
Discover names in public certificate records.
Network and domains