One platform for the entire application security lifecycle
CodesGuard correlates findings from static code, open-source dependencies, dynamic runtime, in-app instrumentation and autonomous penetration testing — in a single, evidence-backed workflow. This documentation walks you through every module, from your first scan to reading and acting on results.
Getting started
Create your account, set up a workspace, and understand the dashboard in a few minutes.
Start here →Run your first SAST scan
Upload a source archive, scan for vulnerabilities, and read dataflow-backed findings.
SAST guide →What is CodesGuard?
CodesGuard is an application security (AppSec) platform that brings five complementary testing disciplines into one console. Instead of stitching together separate tools for code analysis, dependency scanning, dynamic testing, runtime instrumentation, and penetration testing, you run them all against the same workspace and see the results correlated in one place.
Each module answers a different security question:
SAST — Static analysis
“Is there a vulnerability in the code I wrote?” Scans your source for injection, secrets, access-control and other flaws, with dataflow evidence and AI false-positive review.
Learn SAST →SCA — Dependencies
“Is there a known vulnerability in code I imported?” Surfaces vulnerable third-party packages, matched against public advisories, derived from your SAST scans.
Learn SCA →DAST — Dynamic scans
“Can it be exploited while it’s running?” Actively probes a live application or API with an active scanner that confirms each issue with the request and response, including authenticated scanning.
Learn DAST →IAST — Interactive testing Early access
“What is actually vulnerable under real traffic?” An in-process agent confirms vulnerabilities from inside the running app, with the exact request, code path and stack trace behind every finding.
Learn IAST →AI Pentest — Autonomous testing
“What would a real attacker do?” Deploys a swarm of autonomous agents that reconnoiter, chain vulnerabilities, and prove exploits — with a live reasoning stream.
Learn AI Pentest →How the modules fit together
CodesGuard is organized around a simple idea: shift-left and shift-right in the same workspace. Static and dependency analysis catch issues early in the code; dynamic, in-app and autonomous testing validate what’s actually exploitable in a running system. Everything lands in a shared Findings view and a cross-module security-posture dashboard.
Navigate this documentation
Getting started
Signup, login, 2FA, workspaces and the dashboard.
Engagements & runs
The target model behind DAST and AI Pentest.
Findings
Read, filter and correlate results across modules.
Security & 2FA
Protect your account with authenticator-based 2FA.
Organizations
Workspaces, members, roles and invitations.
Billing & plans
Tiers, module entitlements and usage limits.