FREE TOOL / AI-BOM SCANNER
Map the AI attack surface of any public repo.
Paste a public GitHub repository. In about a minute you get its AI bill of materials: providers, models, agents, tools, MCP servers and prompts, with the top risks mapped to the OWASP Top 10 for LLM applications.
Scan a public GitHub repository
Public repositories on GitHub only, up to 200 MB. Nothing is installed or run; the code is read and the download is deleted when the analysis ends.
Limits. Static analysis of the default branch at one commit. It covers the AI attack surface only and is not a full security scan: no dependency, secret or general code analysis, and no runtime verification.
How the scanner works
How it works
We confirm with GitHub that the repository is public and under 200 MB, download the default branch at its latest commit, and read the code without running it. The download is deleted as soon as the analysis finishes.
What it covers
- AI providers, models and endpoints
- Agents, tools and MCP servers
- Prompts and vector stores
- OWASP Top 10 for LLM applications patterns
What it does not cover
This is not a full security scan. Dependency vulnerabilities, leaked secrets, infrastructure files and general code flaws are covered by the CodeStax platform, which also rescans on every change.
Common questions
What is an AI-BOM?
An AI bill of materials lists the AI components an application depends on: model providers, models, agent frameworks, tools, MCP servers, prompts and vector stores. The full report includes a CycloneDX AI-BOM you can keep with your other software inventories.
What does the free scanner check?
It reads the default branch of a public GitHub repository at one commit and maps its AI attack surface: which AI components are used, how they connect, and which patterns match the OWASP Top 10 for LLM applications. It does not run the code.
Is this a full security scan?
No. It covers the AI attack surface only. It does not check dependencies for known vulnerabilities, look for leaked secrets, review infrastructure files or analyse general application code. The CodeStax platform does those in one scan.
What happens to the repository and the results?
The repository is downloaded once for the analysis and deleted straight after. Results are kept for 30 days and then removed. Result pages are not indexed by search engines.
Why do you ask for a work email?
The summary is free without one. The full report, with every finding, the complete inventory and the AI-BOM download, unlocks with a work email so our team can follow up if you want help. You choose whether we may contact you.
Watch your AI attack surface on every change.
CodeStax tracks AI components and LLM risks across your private repositories and pull requests, alongside code, dependency, secret and infrastructure analysis.