Who it's for
Businesses that run their own software and want to know it is safe before an attacker finds out for them.
- Custom web apps and customer portals
- Internal tools and APIs
- WordPress plugins and themes
- Backends for mobile apps
What you get
- A written report. Each finding with its severity, its impact and how to fix it.
- The fixes. Code changes as a pull request or as patch files.
- Verified findings only. Every finding is confirmed by hand before it goes in the report.
- Reviewed fixes. Every change is reviewed line by line.
- A walkthrough call with your developers.
Price: fixed, quoted after the scope call. It depends on the size of the code and what is in scope.
How it works
- Request. Tell us about the code with the form below. Don't send code or access yet.
- Scope and authorization. A short call to agree on scope, price and timeline. You sign an authorization, and we confirm who you are and that your business owns the code.
- Access. Read-only access for the length of the review: a collaborator invite, a read-only deploy key, or an archive of the code.
- Review. We work on our own computers, with encrypted disks. AI-assisted analysis helps us find candidate issues. A person confirms each one.
- Report and fixes. You get the report and the code changes. Nothing lands in your code until you merge or apply it.
- Close out. We remove our access when the work is done and delete our copy of the code within 30 days, unless you ask us to keep it.
How we handle your code
Nothing installed on your side.
No apps, CI actions, hooks, scripts or keys in your repositories or your systems.
Our staff do the work.
Only Digitaino staff run the review. You deal with the person doing it, not a portal.
AI-assisted, human-verified.
We use AI-assisted analysis from a commercial AI provider, which processes your code under its own data terms. Your engagement agreement names the provider and those terms.
Sensitive data.
If the code handles health records, criminal justice data or export-controlled technology, tell us first. Some of it needs a different approach.
Your report is yours.
Share it with your insurer, lawyer or auditors any time. We work directly for the business that owns the code.
Short-lived access.
Read access only, for the length of the review. Revoke it any time.
Request a review
Good to know
- Sending this form doesn't start an engagement. We reply within one business day to set up a scope call.
- No uploads here. Access is set up after you sign the authorization.
- Prefer to talk? Call 737-305-5448.
Se habla español.