- Check selected repository files for known risky patterns
- Find committed .env files, possible secrets and unsafe database rules
- Check supported npm lockfiles against OSV.dev
New AI-assisted pull request fixes
GitHub security scanner
for AI-built apps.
Review your GitHub repository before launch. Check exposed secrets, unsafe database rules and npm dependencies, then use an optional AI review for authentication and payment risks. Turn findings into fix prompts or pull requests you review.
3 free scans and 2 free fixes. Pro from £10 a month.
No code stored You approve every change
Built for teams shipping withCursorLovableClaudeChatGPTGitHub
Product walkthrough
See Quick Scan First in action.
From opening a repository to reviewing the findings and preparing a fix.
Review before release
From code findings to a pull request you control.
Start with built-in checks, then choose deeper review when your launch needs it.
- Investigate likely authentication, ownership and payment mistakes with Pro or credits
- Copy a fix prompt or request an AI-assisted pull request
- Inspect the diff and test the change before merging
Workflow
From repository to reviewed fix.
A focused release check that fits the way you already work.
01
Open a repository
Quick Scan First reads the GitHub repository you choose using a fine-grained token you control.
02
Run a focused review
Static checks and AI review look for secrets, unsafe permissions, broken payments and production risks.
03
Ship a reviewed fix
Generate a pull request, inspect the changes on GitHub, and merge only when you are satisfied.
Coverage
The release risks that are easy to miss.
Fast deterministic checks for known mistakes, with deeper reasoning when you need it.
Private by design.
Your source is processed for the scan, not stored as a copy.
Pricing
Start with the basics. Upgrade when you need depth.
Use the free checks, subscribe for regular reviews, or buy credits when a launch needs extra attention.
£0forever
For getting the fundamentals right.
- 3 built-in scans
- 2 one-click fixes
- Ready-made fix prompts
Most capable
Pro£10/ month
For builders shipping products regularly.
- 10 full AI reviews / month
- 10 one-click fixes / month
- Everything in Free
- Cancel at any time
Pay once
Extra capacity without a subscription.
25 credits£7
60 credits£15
150 credits£30
Questions
The details, clearly answered.
How access, code handling, AI reviews and billing work.
Will it change my code without asking?+
No. A fix is always a pull request on a new branch. Nothing changes until you review and merge it. Quick Scan First will not touch workflows or anything outside your repository.
What access does it need?+
A fine-grained GitHub token, limited to repositories you choose, with read and write access to Contents and Pull requests. You can revoke it at any time.
Is my source code stored?+
No. Code is read during a scan and is not saved on our servers. Relevant files are sent to Anthropic only when an AI review or fix needs them.
Does it work with private repositories?+
Yes, provided your fine-grained token has access to them.
Can the AI be wrong?+
Yes. Quick Scan First is a useful second pair of eyes, not a security audit or guarantee. Always review generated pull requests before merging.
What is a credit?+
Credits are pay-as-you-go. An AI scan costs 3 credits and a fix costs 5. They do not expire, and failed operations are refunded.
Is VAT added at checkout?+
No. The price you see is the price you pay, with nothing added on top at checkout.
Can I cancel Pro?+
Yes. Cancel from the billing page in the extension and keep Pro access until the end of the paid period.
Choose your review
Explore the checks behind your launch.
Find the workflow that fits your repository and the risks you need to investigate.
Security knowledge
Know what to check before you ship.
Focused guides for repository security, exposed credentials, database access and repeatable pre-launch review.
