Amnify Code

Amnify Code audits source code repositories for security issues. After a full audit of the whole repository on connection, it continues to check the code as development proceeds. Checks covered: - Leaked secrets: credentials, API keys, tokens and private keys in the working tree and Git history - Insecure code (SAST): SQL injection, XSS, SSRF, command injection, unsafe deserialization, path traversal, open redirects and weak cryptography - Authorization and tenant isolation: missing endpoint checks, IDOR, cross-customer data access - Business logic across files: trust boundaries, webhook and callback validation - Sensitive data exposure: secrets and personal data in logs, error responses and over-broad API responses - Vulnerable dependencies (SCA): direct and transitive packages checked against new CVE advisories - Infrastructure as code: Terraform, CloudFormation, Kubernetes, Helm, Dockerfiles, ARM and Bicep - CI/CD pipelines: workflows running untrusted input, over-privileged tokens, unpinned actions and images An agent triages each signal by reading the surrounding code, following inputs to where they are used, checking existing guards and assessing reachability. Harmless signals are dropped, and the remaining findings are grouped by root cause. Each finding includes severity, location, evidence and a fix where one is possible. Scans run on connection, on a daily, weekly or monthly schedule, on pushes to the default branch, on pull requests (as inline comments) and when a new CVE advisory matches a dependency version in use. Related capabilities in the Amnify platform include PR review, Autofix (fixes as pull requests) and CVE tracking. A free signup and a demo booking are offered.