Security overview
Evidence-first findings from your local SecuTron scan.
Run a local scanConnect to the SecuTron loopback serverLOCAL API
The API scans the folder on this computer and returns the JSON report to this page. The token stays in this page's memory and is not saved. Start with cargo run -- serve, then open the local URL it prints.
No local API connection yet.
Scan time: —Throughput: —
See the evidence.
Know what to fix.
Review candidate risks with clear file locations, source-to-sink traces, and rule limitations.
Severity distribution
Report health
Import a JSON scan report to see its status.
Findings
Open a finding to review its evidence and limitations.
Rule coverage
What SecuTron currently checks—and where each heuristic stops.
These are candidate detections from the current local CLI. They do not establish exploitability or prove that a repository is secure.
Generate a report from your terminal
Run SecuTron locally, then import the JSON file or paste the report into a saved file.
cargo run -- scan . --format json