Security decisions for every release
backed by evidence
Connect code, APIs, runtime behavior, ownership, and fix verification in one defensible release decision.
- PASS, WARN, BLOCK, or INCOMPLETE
- Policy-based release gates backed by evidence
- Ownership and fix verification in one record
fendix decision
CRITICALMissing auth on /api/users
HIGHCORS wildcard detected
MEDIUMNo Content-Security-Policy
Open-source scanner engine under the MIT License. The CLI needs no account.