Veris

AI Software Risk Intelligence

Know what your software is hiding.

Veris analyzes your codebase to uncover hidden security, reliability, and cost risks before they become expensive problems.

Start free

Read only GitHub access. Your code stays yours.

Data exposure
Anyone can download your users' ID photos
Verification selfies and driver's licenses sit in Firebase with open read rules. Anyone with the path can pull them.
$$$$$critical7
Resource exhaustion
Your AI cost could be infinite
A chat hook fires the model on every render. Leave a tab open and you pay for the model and the function on every cycle, with no ceiling.
$$$$$high5
Resource exhaustion
One upload can loop until the bill stops you
The resize job writes back to the same bucket that invokes it. One photo fans into thousands of function runs. Nothing else cuts it off.
$$$$$critical4
Data exposure
Anyone can spend on your OpenAI account
The API key ships in the browser bundle. Scrapers find keys like this in minutes, and there is no spend cap on the account.
$$$$$critical6
Authorization
Someone can read your users' data
The generated backend left the database open. Anyone with the public key can read emails, DMs, and payment metadata from the browser.
$$$$$critical8
Resource exhaustion
This agent can burn money overnight doing nothing
The assistant writes a todo, reads it back, and calls the same tool again. Left unattended, it spends tokens in a loop that produces no work.
$$$$$high3

Data exposure
Anyone can download your users' ID photos
Verification selfies and driver's licenses sit in Firebase with open read rules. Anyone with the path can pull them.
$$$$$critical7
Resource exhaustion
Your AI cost could be infinite
A chat hook fires the model on every render. Leave a tab open and you pay for the model and the function on every cycle, with no ceiling.
$$$$$high5
Resource exhaustion
One upload can loop until the bill stops you
The resize job writes back to the same bucket that invokes it. One photo fans into thousands of function runs. Nothing else cuts it off.
$$$$$critical4
Data exposure
Anyone can spend on your OpenAI account
The API key ships in the browser bundle. Scrapers find keys like this in minutes, and there is no spend cap on the account.
$$$$$critical6
Authorization
Someone can read your users' data
The generated backend left the database open. Anyone with the public key can read emails, DMs, and payment metadata from the browser.
$$$$$critical8
Resource exhaustion
This agent can burn money overnight doing nothing
The assistant writes a todo, reads it back, and calls the same tool again. Left unattended, it spends tokens in a loop that produces no work.
$$$$$high3

The biggest risks are the ones you don't know about.

Unexpected Costs
A small loop, open key, or runaway job can turn into a bill you only notice when it hurts.
Data Exposure
Misconfigured permissions leave user data reachable from places you never meant to open.
Production Problems
Issues that look quiet in the repo become expensive incidents after you ship.

How it works

01
Connect Your Repository
Securely connect GitHub with read only access.
- Isolated environment
  Your code is analyzed in a private, isolated environment.
- Never used to train AI
  Your repository is never used to train models.
- Encrypted
  Protected in transit and at rest.
api
web
jobs
GitHub
Read only
Veris
IsolatedNo trainingEncrypted
02
Veris Understands Your Software
We don’t skim a diff or follow a chat. Veris parses the whole codebase with ASTs, maps architecture and dependencies, and reads the intent behind every workflow so we understand how the system is meant to run, and nothing important stays buried.
App
Data
Auth
API
Jobs
03
Get Actionable Intelligence
You don’t get a dump of syntax bugs. Each finding is backed by evidence in the repo, ranked by real impact and cost scale, so you see what can hurt the business and what to fix first.
Authorization
Someone can read your users' data
The generated backend left the database open. Anyone with the public key can read emails, DMs, and payment metadata from the browser.
$$$$$critical8

01
Connect Your Repository
Securely connect GitHub with read only access.
- Isolated environment
  Your code is analyzed in a private, isolated environment.
- Never used to train AI
  Your repository is never used to train models.
- Encrypted
  Protected in transit and at rest.
02
Veris Understands Your Software
We don’t skim a diff or follow a chat. Veris parses the whole codebase with ASTs, maps architecture and dependencies, and reads the intent behind every workflow so we understand how the system is meant to run, and nothing important stays buried.
03
Get Actionable Intelligence
You don’t get a dump of syntax bugs. Each finding is backed by evidence in the repo, ranked by real impact and cost scale, so you see what can hurt the business and what to fix first.

api

web

jobs

GitHub

Read only

Veris

IsolatedNo trainingEncrypted

Why Veris

Code agents and PR tools are good at their jobs. They still leave a gap when you need an independent read of the whole system.

Cursor · Claude Code · OpenAI
Code agents
What they do
Write and change code from the conversation you are in.
- Shipping features and refactors
- Following the task you just asked for
Where they miss
- "Find issues" is too broad a hunt
- Chat history pulls them toward files they already touched
- They tend to defend the code they just wrote
Veris
Independent risk intelligence
What it does
Independent read of the whole repository, not the chat, and not only the latest diff.
- Ranking cost, security, and reliability risk
- Evidence, impact, and a next step
Why it is different
- No prompt to please
- No PR window to stay inside
- Not biased by the chat that wrote the code
Greptile · CodeRabbit
PR reviewers
What they do
Comment on the lines that changed in a pull request.
- Catching local bugs in the diff
- Reviewing the change before merge
Where they miss
- They only see the change, not the system
- Issues already on main never show up
- Recency in the diff crowds out real risk

Not just alerts. Answers.

Every finding comes with context so you can decide what to fix first, and why it matters.

Authorization

Someone can read your users' data

The generated backend left the database open. Anyone with the public key can read emails, DMs, and payment metadata from the browser.

$$$$$critical8

Impact: Anyone with the public key can read emails, DMs, and payment metadata from the browser.
Evidence: Row level security was left off on user and messaging tables.
Recommendation: Turn RLS on and restrict those tables to authenticated users before you ship.

Pricing

Transparent pricing

Start with a free trial scan on one project. Upgrade when you need more projects, credits, and full findings.

Solo Founder

Perfect for founders and tiny teams.

$19

/mo

Billed yearly · $230/yr

10 projects
3 members
400 AI credits / mo
All findings unlocked
Bring your own key

Get started

Pro

More coverage for growing teams.

$39

/mo

Billed yearly · $470/yr

25 projects
10 members
800 AI credits / mo
All findings unlocked
Bring your own key

Get started

Scale

Built for multi-repo security programs.

$71

/mo

Billed yearly · $854/yr

Unlimited projects
Unlimited members
1500 AI credits / mo
All findings unlocked
Bring your own key

Get started

Credits, FAQs, and full plan details on the pricing page.

Credits

Bring your own keys. Buy credits if you run out.

Paid plans can scan with your models, or with Veris credits. Extra credits never expire.

Bring your own LLM keys
Connect Anthropic, OpenAI, Gemini, OpenRouter, or an OpenAI-compatible endpoint. Paid plans can run scans on your keys instead of Veris credits.
Buy credits if you run out
Plans include a monthly allotment. If you need more, buy only what you need. Extra credits never expire. They stay on your account until you use them.

Credit packs and plan details on the pricing page.

Our mission

Make hidden software risk impossible to ignore.

AI ships code faster than teams can understand it. Veris closes that gap with an independent read of the whole system, so founders and builders can ship with eyes open.

Independent
Not biased by the chat that wrote the code.
Whole system
The full repository, not only the latest diff.
Actionable
Evidence, impact, and a clear next step.

Veris

Ship with confidence.

Connect a repository and see the risks that matter before they become expensive problems.

Scan your repo for free

Read only GitHub access. Already have an account? Login

Know what your software is hiding.

The biggest risks are the ones you don't know about.

Unexpected Costs

Data Exposure

Production Problems

How it works

Connect Your Repository

Veris Understands Your Software

Get Actionable Intelligence

Someone can read your users' data

Connect Your Repository

Veris Understands Your Software

Get Actionable Intelligence

Why Veris

Not just alerts. Answers.

Someone can read your users' data

Transparent pricing

Solo Founder

Pro

Scale

Bring your own keys. Buy credits if you run out.

Bring your own LLM keys

Buy credits if you run out

Make hidden software risk impossible to ignore.

Ship with confidence.