Most code security tools I’ve tried have one of two problems: they bury you in alerts, or they make you rewire your CI before you see a single result. I’m building one that does neither: Connect GitLab and you’re done. No pipeline changes, no config files in your repos. Your code is never run. Your source isn’t kept after a scan. One issue feed instead of five reports. It covers dependencies, leaked secrets, insecure code, infrastructure misconfigs and outdated runtimes, ranked by what’s actually exploitable. Fixed issues close on their own and reopen if they come back. Self-hosted. Your code stays on your infrastructure. It’s early, and I’m looking for a few GitLab teams to try it and shape it. Two questions: What do you hate most about your current scanner? What would it take for you to switch? Comment or DM if you’d like to discuss.   submitted by   /u/proxyworm [link]   [comments]