One required input
Send one public GitHub URL. RepoGuard resolves the default branch to a full 40-character commit before payment.
Paste a repository. Get security evidence.
RepoGuard pins one public GitHub repository to an exact commit, then scans it for risky code patterns, leaked secrets, and vulnerable dependencies. Repository code is never executed.
Exact request
Review, pay, and scan
The server terms are checked against every value below before your wallet is asked to sign. Any drift stops checkout.
Repository
Exact commit
Price$0.01
NetworkBase
AssetUSDC
Protocolx402 v2
Beneficiary
0x27D9F9262BA58cA026b1004e1B81E4f55CB6c0f7No injected EIP-1193 wallet was found. RepoGuard never asks for a private key. Use this URL with an x402-capable agent instead.
Delivered
Your full report
Payment settled on BaseTransaction:
Three evidence classes
RepoGuard-owned Semgrep rules, Gitleaks secret detection, and OSV dependency advisories.
Machine-verifiable
Every delivery contains exact-input evidence, explicit limits, scanner status, and a content digest.
RepoGuard is a bounded static-analysis product, not a penetration test, certification, legal opinion, or guarantee of security. Current revenue is shown only from independently verified external settlements. Wallet authorization is processed by the injected wallet and x402 payment middleware; RepoGuard never requests or stores a private key.