Getting started

Getting started with CodesGuard

This guide takes you from a brand-new account to a working security workspace: sign up, secure your login, understand how the platform is organized, and read your security posture on the dashboard.

The big picture CodesGuard runs five kinds of security testing — SAST, SCA, DAST, IAST and AI Pentest — against a shared workspace, and correlates the results into one Findings view. You don't have to use all five; start with SAST and add the rest as you need them.

Create your account

CodesGuard is sold and provisioned through our team, so access starts with an invitation to a workspace rather than an open sign-up form. Once your workspace is set up, you and your teammates each receive an invitation by email. Open the invitation link at app.codesguard.io and complete a short, three-step registration that verifies your email before you set a password:

Enter your work email
CodesGuard sends a six-digit verification code to that address.
Verify the code
Type the six-digit code from your inbox to confirm you own the email.
Set your name and password
Choose a full name and a password (at least 8 characters). You're signed in automatically once this completes.

Invited to a workspace? If a teammate invited you, open the invitation link and register with the invited email address — you'll join their workspace automatically instead of creating a new one. See Organizations.

Sign in

On the sign-in screen, enter your work email and password. If you've enabled two-factor authentication, CodesGuard then asks for the six-digit code from your authenticator app (or one of your backup codes).

Turn on 2FA early Because CodesGuard holds your source code and vulnerability data, we strongly recommend enabling authenticator-based 2FA right after signup. The full walkthrough is in Security & 2FA.

Workspaces & organizations

Everything in CodesGuard lives inside a workspace (also called an organization). A workspace owns your projects, engagements, scans, findings, members and subscription. Your active workspace is shown at the bottom-left of the sidebar — click it to switch between workspaces you belong to.

If you don't have an active workspace yet, the app prompts you to create one before you can start scanning. Managing members, roles and invitations is covered in Organizations.

The dashboard: your security posture

After signing in you land on the Dashboard — the command center that rolls up every module into a single view of your security posture. Nothing here is mock data; it aggregates real results from your SAST projects, SCA advisories, and DAST / AI Pentest runs.

CodesGuard dashboard showing KPI tiles, severity breakdown and findings-over-time chart — The top of the dashboard: KPI tiles, a severity breakdown, and a findings-over-time trend.

The four KPI tiles across the top give you an at-a-glance read:

Open findings

Total unresolved findings across every module.

Needs attention

The count of critical + high findings — what to fix first.

Apps monitored

How many projects and engagements are under coverage.

Active runs

DAST / AI Pentest runs currently executing.

Below the KPIs, the dashboard breaks the same data down several ways so you can see where risk concentrates:

Dashboard panels: findings by module, top vulnerability types, top vulnerable apps and dependencies — Findings by module, top vulnerability types, and the riskiest apps and dependencies.

Severity breakdown — open findings split into critical / high / medium / low / info.
Findings over time — new findings discovered per week over the last 8 weeks.
Findings by module — where risk originates (SAST, SCA, DAST, IAST, AI Pentest).
Top vulnerability types — your most common weaknesses (XSS, SQL injection, insecure config, …).
Top vulnerable apps and Top vulnerable dependencies — the projects, engagements and packages carrying the most risk.
Attention required — the highest-severity issues to fix first, each linking straight to the finding.
Environment — the health of your tenant scanning stack and your current plan. See Environment.

Finding your way around

The left sidebar is grouped to match how you work:

Group	What's inside
Overview	The Dashboard — cross-module security posture.
Scanning	SAST, SCA, DAST, IAST, AI Pentest — the testing modules.
Program	Engagements & Runs (the target model behind DAST / AI Pentest) and unified Findings.
Workspace	Environment, Organization, Security and Billing.

Locked modules Modules that aren't part of your current plan appear with an Upgrade badge and route to Billing. IAST is in early access and available on Enterprise. What's available depends on your subscription — see Billing & plans.

Next: run your first scan

The fastest way to see value is a SAST scan — upload a source archive and get vulnerability findings with dataflow evidence in minutes. Head to the SAST guide to walk it end to end.

SAST — Static analysis →

Create a project, upload code, run a scan, and read the results.

Security & 2FA →

Lock down your account with an authenticator app.