Coreframe · Lite Audit
Paste one file. Get real findings, not a score.
An AI-assisted security pass over a single file. Up to 3 findings, each quoting the line of your code that evidences it. Free, and deliberately narrow — it is a taste of the audit, not a replacement for one.
Not stored. Not trained on. Secrets redacted before analysis.
3 free runs per day · one file · up to 400 lines · security dimension · how we handle your code
You're about to paste proprietary source into a web form.
You should want to know exactly what happens to it. Here is the whole answer.
Ephemeral by default
Your code lives only for the duration of the run. It is never written to a database, an object store, or a log line.
Never used for training
Submissions go to the Anthropic API under settings that keep them out of model training, and are not shared with anyone.
Secrets redacted first
API keys, tokens, private keys and connection strings are detected and replaced before the input reaches a model.
Evidence or nothing
Every finding must quote the line of your code that demonstrates it. Claims we can't evidence are discarded server-side.
What this tool cannot do
- — It sees one file. It does not know what calls it, what middleware runs first, or how it is deployed.
- — It runs one security pass. It is not checking performance, architecture, dependencies, or infrastructure.
- — A clean result is not a clean bill of health. It means this pass found nothing it could evidence in this file.
- — It is indicative, not a guarantee. Treat it as a signal worth following up, never as sign-off.