PR Security Guardrails

ThreatLensScan every diff before it merges. Catch hardcoded secrets, insecure configs, and broken auth logic that generic scanners miss.

Diff-first scanningCustom policy packsZero false positives

Run a scan

Paste a unified diff and execute the active policy pack.

Findings

Awaiting input.

No findings yet — paste a diff and run the scanner.

What this is

A practical guardrail layer designed to run in pull requests, not a full static analysis replacement.

Who it fits

Teams with limited AppSec bandwidth that still need strict checks on authz, data boundaries, and risky runtime config changes.

Private flow

Server-to-server clients can call authenticated scan endpoints with x-api-key and optional OpenRouter key override.