Skip to content
Demo
A made-up account,
acme
. Its deep scan of acme/api replays on a loop, sped up. Nothing here is real or saved.
Back to the site
Get started
Agent Cernis
Deep scan
Overview
acme · 6 repositories · last 30 days
All findings
Deep scan running on
acme/api
· Hunt
· started just now
Watch →
Pull requests reviewed
37
18 the 30 days before
Findings
8
4 the 30 days before
Fixed
6
1 the 30 days before
Spent, 30 days
$3.16
$2.18 the 30 days before
Activity
PR reviews
Deep scans
All scans
4
Oct 15
Oct 30
Today
Open findings
View
10
critical
1
high
3
medium
4
low
2
Needs attention
View all
critical
Invoice PDFs can be downloaded across tenants by changing the id
acme/api · src/routes/invoices.ts:42
3 days ago
high
Stripe webhook is acted on before its signature is checked
acme/api · src/webhooks/stripe.ts:31
3 days ago
high
Admin CSV export trusts the orgId in the query string
acme/api · src/admin/export.ts:58
3 days ago
high
Password reset links never expire and survive a password change
acme/dashboard · lib/auth/reset.ts:23
9 days ago
Most exposed repos
View all
acme/api
1
2
1
acme/dashboard
1
2
acme/payments
1
1
acme/ingest
1
Recent scans
View all
Deep scan
acme/api
—
Running
just now
PR review
acme/api
#318
1 finding
Completed
yesterday
PR review
acme/dashboard
#142
1 finding
Completed
2 days ago
Deep scan
acme/api
3 findings
Completed
3 days ago
Deep scan
acme/payments
2 findings
Completed
3 days ago
PR review
acme/payments
#57
no findings
Completed
3 days ago