Features
Multi-platform code review for secrets and malware, plus alert ingestion to verified remediation — with audit trails and safety controls throughout.
Multi-platform AI code review
Review PRs and MRs for secrets, malware, and backdoors across GitHub, GitLab, Bitbucket, and Azure DevOps — or any local git repo.
- ·Webhooks: /webhook/github, /webhook/gitlab, /webhook/bitbucket
- ·Dry-run by default — posts when CODE_REVIEW_AUTO_POST=true
- ·Never merges; approve only if explicitly enabled
- ·Critical findings → request changes + Slack alert
- ·Open secrets: API keys, PATs, AWS/Google keys, JWTs, private keys, DB URLs
- ·Malware / backdoors: reverse shells, webshells, curl|bash, crypto-miners, cron/Run keys
Multi-platform monitoring
Collectors across cloud providers, CI/CD platforms, Kubernetes, and servers.
- ·AWS, GCP, Azure cloud monitoring
- ·GitHub Actions, GitLab CI, Jenkins, Bamboo, Azure DevOps
- ·Kubernetes, Docker, ArgoCD, Helm
- ·Linux, Windows, RHEL server diagnostics
Safer CI/CD remediations
Pipeline failures: fetch logs → retry → config fix PR/MR. Bamboo Specs fixes open as Bitbucket PRs.
- ·BAMBOO_SCM_PROVIDER=bitbucket → Specs fix PRs on Bitbucket
- ·GitLab connect with native Secret token (X-Gitlab-Token)
- ·Clear fix vs diagnose-only boundaries
- ·Same safety model — dry-run and approval gates
Automatic fix verification
Every fix is verified immediately and monitored for stability over 5 minutes.
- ·Immediate verification in under 30 seconds
- ·5-minute stability monitoring
- ·Multiple health checks and success rate tracking
- ·Detailed verification reports in audit logs
Auto-documentation
Runbooks, postmortems, and knowledge base articles generated after every incident.
- ·Step-by-step runbooks for recurring issues
- ·Detailed postmortem reports
- ·Searchable knowledge base with tags
- ·Markdown format with JSON metadata
MCP server & BYOK
32 MCP tools for Cursor, Claude Desktop, and custom agents. Each org brings their own keys.
- ·kubectl, GitHub logs, ArgoCD, Helm tools
- ·Queue incidents and run full diagnosis
- ·Per-org credentials and configuration
- ·Connect from any MCP-compatible client
Safety-first execution
Never delete. Never destroy. Dry-run by default with human approval gates.
- ·Command blacklist and whitelisting
- ·Slack approval for critical actions
- ·Emergency stop switch
- ·PII scrubbing in logs and notifications
Auto-escalation
When the agent can't resolve, it creates tickets and notifies your team.
- ·Jira and Zoho Desk ticket creation
- ·Slack and email notifications
- ·Configurable escalation policies
- ·Complete audit trail for every decision
Common use cases
PR / MR security review
Flag hard-coded secrets, backdoors, and risky BAT/PowerShell before merge — GitHub, GitLab, Bitbucket, Azure DevOps.
Kubernetes CrashLoopBackOff
Diagnose missing env vars, image pull errors, and OOMKilled pods. Restart or patch safely.
CI/CD + cloud stacks
GCP + GitLab → GKE/VMs. AWS + Bitbucket + Bamboo → EC2/EKS/S3. Pipeline logs → retry → fix PR.