Airuncode
Freemium
Developers preferring fully local agent execution
Sentrint
Freemium
You built the app with Claude, shipped it, and only later discovered your API keys were sitting in plain text inside a public repo — because nobody ran a security scan before you clicked deploy.
$10 or $22/mo · Free tier: 1 scan per month, no card required, read-only GitHub access, repository deleted when scan ends · Checked Oct 29, 2026
Similar tools
ClixadFreemiumClixad is a terminal coding agent with free daily usage, configurable approval modes and…
ManifestGoFreemiumThe core workflow is a one-prompt generation: describe what you want, and ManifestGo produces…
AiruncodeFreemiumAiruncode runs agents locally, lets you plug in your own provider keys or on-device models…
AtlarixFreemiumAtlarix is a desktop AI workstation where agents plan, write, test, and debug inside workspaces…
Screenshots 4
Summary
Sentrint takes the GitHub URL of an AI-generated app and runs it through a four-category security engine: hardcoded secrets, database access rules, dependency vulnerabilities, and dangerous code paths where user input reaches a command. An AI layer then filters the results, discarding findings the engine flagged but that are not actually exploitable, so you are not chasing noise. What comes back is a score out of 100, every finding written in plain English, and a fix prompt already rewritten for the specific LLM platform that built the app — paste it in, scan again, watch the grade move. The ceiling appears fast: no API access, no CI integration, no self-hosting, and no way to automate scans without a human clicking through the interface each time.
Bottom line: Sentrint fits the developer who vibe-coded an app on a weekend and needs to know whether it is safe to share the link — it breaks down the moment a team wants scans running automatically on every pull request.
Pricing Plans
Usage-BasedLast verified 6 days ago- Price
- $10 or $22/mo
- Free Tier
- 1 scan per month, no card required, read-only GitHub access, repository deleted when scan ends
FREE
Free
The free scan is a real one, the same engine as every paid plan. No card to start.
- 1 scan per month
- Every finding in plain English
- Up to 25 fixes in one paste
- Per-finding AI fix
- AI false-positive review
- All 16 AI tools supported
- Read-only GitHub access
- Repository deleted when scan ends
TOP-UP
$10per month
Top up when you're iterating fast. One-time purchase, not a subscription.
- 6 scans per purchase, credits never expire
- Every finding in plain English
- Up to 25 fixes in one paste
- Per-finding AI fix
- AI false-positive review
- All 16 AI tools supported
- Read-only GitHub access
- Repository deleted when scan ends
FOUNDER
$22per month
Subscribe if you ship every week. Most popular. Monthly or annual, cancel anytime.
- 36 scans per month, up to 15 repos
- Every finding in plain English
- Score, grade & README badge
- Up to 25 fixes in one paste
- Per-finding AI fix
- AI false-positive review
- All 16 AI tools supported
- CSV / JSON export
- Dependency inventory with CycloneDX file
- Read-only GitHub access
- Repository deleted when scan ends
View full pricing on sentrint.com →
Pricing may have changed since last verified. Check the official site for current plans.
Find your fit
Before you choose Sentrint
More options in Coding Assistants. Compare pricing, platforms, and features side by side.
Atlarix
Freemium
Engineering teams needing private/local AI coding assistance
Pros
- AI-filtered results strip out findings that are not actually exploitable, so you spend time fixing real vulnerabilities instead of chasing false alarms that a raw static analysis tool would dump on you.
- Fix prompts are rewritten for the specific LLM platform that built the app — Claude, Gemini, or any of the 16 supported platforms — so a non-technical builder can paste the output directly back into their coding agent without translating a security finding into an instruction.
- Plain-English explanations of every finding mean a product manager or solo indie developer can read the report and understand what is broken, without needing a security engineer to interpret CVE IDs or stack traces.
- Score-over-time tracking across multiple scans gives you a visible signal that fixes are landing — not just a one-time snapshot, but a trend line that confirms the grade is actually climbing.
Cons
- There is no API and no CI/CD integration, so every scan requires a human to initiate it manually through the interface — any team that wants scans running automatically on pull requests or blocking a deployment on a failing grade hits this wall immediately and has to move to a tool like Snyk or Semgrep that exposes pipeline hooks.
- The scan covers four fixed categories: secrets, access rules, dependencies, and code paths. Teams whose apps have security concerns outside those categories — authentication logic, rate limiting, business-logic flaws — get no coverage and no signal, with no way to extend the engine.
- No self-hosted option means every repository you scan is processed on Sentrint's infrastructure — teams under data-residency requirements or working with proprietary codebases they cannot send to a third-party service cannot use the tool at all.
About
- Platforms
- Web
- API Available
- No
- Self-Hosted
- No
- Last Updated
- September 9, 2026
Best For
Who it's for
- Non-technical builders using AI coding agents
- Indie developers shipping vibe-coded apps
- Teams needing plain-English security reports
What it does well
- Scan AI-generated app repositories for security flaws
- Generate platform-specific fix prompts for detected issues
- Track security score trends across multiple scans
Integrations
Frequently Asked Questions
- Is Sentrint free?
- Sentrint offers a free option alongside paid upgrades. Pricing: $10 or $22/mo. Check the current allowances and terms before choosing a plan.
- What platforms does Sentrint support?
- Sentrint is available on: Web.
API keys left in public repos after shipping AI-built apps
You built the app with Claude, shipped it, and only later discovered your API keys were sitting in plain text inside a public repo because nobody ran a security scan before you clicked deploy.
Sentrint takes the GitHub URL of an AI-generated app and runs it through a four-category security engine: hardcoded secrets, database access rules, dependency vulnerabilities, and dangerous code paths where user input reaches a command. An AI layer then filters the results, discarding findings the engine flagged but that are not actually exploitable, so you are not chasing noise. What comes back is a score out of 100, every finding written in plain English, and a fix prompt already rewritten for the specific LLM platform that built the app.
Use cases and features
Scan AI-generated app repositories for security flaws. Generate platform-specific fix prompts for detected issues. Track security score trends across multiple scans. The vendor states the tool supports GitHub plus 16 platforms including Cursor, Windsurf, Claude Code, Lovable, Bolt, and v0.
AI-filtered results strip out findings that are not actually exploitable, so you spend time fixing real vulnerabilities instead of chasing false alarms that a raw static analysis tool would dump on you. Fix prompts are rewritten for the specific LLM platform that built the app so a non-technical builder can paste the output directly back into their coding agent.
Who it is for / who should skip it
Non-technical builders using AI coding agents, indie developers shipping vibe-coded apps, and teams needing plain-English security reports will find the plain language and targeted prompts useful. Teams that want scans running automatically on pull requests or covering authentication logic, rate limiting, or business-logic flaws should skip it, as there is no API or CI/CD integration and coverage stays limited to four fixed categories.
Contribute
- Work on Sentrint? Claim this listing.
- Embed a badge for your README or site.
Sign in to rate this tool or suggest an edit.