Independent code quality audits
Find the risks your code review missed.
A score out of 100 across six dimensions, free for public GitHub repositories, whether the code was written by people or AI. The paid audit report explains the findings and gives the fixes in priority order.
Need a private code audit? Talk to us.
Public evaluation: github.com/arhuman/kwalitai
85/100
- architecture 9/10
- performance 8/10 weakest axis
- consistency 8/10 weakest axis
- security 9/10
- documentation 8/10 weakest axis
- correctness 9/10
-
Tied to one commit
Every score names the exact commit it rates.
-
Published method
The same checks and scoring rule for every repository.
-
Delivered privately
The full audit report, which describes weaknesses, goes to the buyer only.
-
A person checks disputes
If a finding looks wrong, tell us: a person looks at it.
From a score to fixed code, in three steps
-
1Free
Rate your repository
Paste a public GitHub repository. Get a score out of 100, six axis grades, finding counts and a badge for your README.
-
2€490
Get the full audit report
Every finding with its code location, why it matters and the fix, in priority order. Delivered privately as a PDF.
-
3Included in €490
Fix, then get your verification review
Hand the report to your team or your AI coding agent. Then request your verification review: a complete second run at a later commit you choose, within 90 days of delivery, that marks every finding of the report and lists the new ones.
One real finding, from report to fix
A real finding from the audit of the repository behind this site, published with the owner's consent.
-
Found
Unbounded repository directory
internal/web/store.go:94 loads every entry without a limit.
-
Why it matters
Cost grows with the catalogue
As the catalogue grows, the page has more data to fetch and render.
-
Recommended
Paginate and cap the fetch
Add pagination and limit the number of entries fetched per page.
-
Verified
Fixed in dcbbdb0
Checked by the verification review.
Which question are you asking?
Developers
What do I fix first?
The full audit report locates every finding and gives the fix in priority order, for you or your AI coding agent, with a verification review after your fixes included.
Product managers
Where is our code weak?
One shared view of code quality across six dimensions, followed from one evaluation to the next.
Investors
What sits behind the demo?
An independent rating and the audit's findings, to ask sharper questions about technical risk before committing capital.
Quality goes beyond security
A security check answers only part of the question. KwalitAI assesses six dimensions to give you a broader view of the codebase.
Architecture, Performance, Consistency, Security, Documentation, Correctness.
Each rating is tied to a specific commit and a published method. Read the method.
See the score free. Get the fixes when you need them.
| What you get | Free public evaluation | €490 audit and verification review, VAT incl. |
|---|---|---|
| Score out of 100 and six axis grades | Yes | Yes |
| Finding counts per axis | Yes | Yes |
| Badge for your README | Yes | Yes |
| Every finding with its code location | Extract for the owner | Yes |
| Why it matters, and the fix | No | Yes |
| Fixes in priority order | No | Yes |
| A verification review after your fixes, within 90 days | No | Yes |
| Compare all plans | Get a free evaluation | Order the audit |
The repository's owner also receives an extract of the audit report. Two reviews of your repository: the audit now, then a verification review after your fixes. Both are delivered privately, because they describe weaknesses.
Evaluations are published by default. The owner of a repository can ask for its evaluation to be removed through the contact form.
Before you ask
Is my evaluation public?
The free evaluation is published by default; the audit report is delivered privately. The owner of a repository can ask for the evaluation's removal through the contact form: it is taken down within 7 days and not published again.
Is this a security certification?
No. It is an automated audit with a published method, not a security certification and not a substitute for a penetration test.
What if a finding is wrong?
The report is generated automatically. If a finding looks wrong, tell us: a person looks at it.
How fast does the audit report arrive?
By email within 7 days of payment, or within minutes when the report of that commit was prepared before the order.
Know where your code stands, and where to focus next.
Start with the free rating. Order the full audit report only if the score tells you it is worth it.
Need a private code audit? Talk to us.
Built by Arnaud ASSAD, writing code since 1988. If a finding looks wrong, a person looks at it. About KwalitAI