Launching today
RuleFix
Your AI coding agent, now compliance-aware
1 follower
Your AI coding agent, now compliance-aware
1 follower
RuleFix gives Claude Code, Cursor, VS Code and Windsurf a compliance brain over MCP. It catches DPDP, GDPR, SOC 2, HIPAA and PCI DSS issues as code is written, suggests fixes, and only closes an issue after re-scanning proves it's gone.
Free Options
Launch Team
Framer AI AgentsDesign and publish professional sites with AI
Promoted
> Hey Product Hunt
I'm Akshat, co-founder of Vinkura. We build software for public institutions, where every change touches sensitive data. Once AI agents started writing half our code, we kept finding the same problems in review: emails in logs, users created without consent records, card fields stored in plain text, secrets in source.
Linters don't know what India's DPDP Act or GDPR expect. Compliance tools find problems months later, in production. So we built RuleFix: compliance checks that run inside the AI coding loop.
> How it works
- Connect your agent in one command. RuleFix is a remote MCP server: one line in Claude Code, Cursor, VS Code or Windsurf, authenticated with an API key.
- Your agent checks code as it writes. 10 MCP tools: check a snippet, scan files, explain a rule, suggest a fix, verify it, and report the scan to your dashboard.
- Evidence-backed fixes. An issue is only marked fixed after RuleFix re-scans the code and confirms the finding is gone. You get a SHA-256 of the file as evidence.
- Import repos like Vercel. Connect GitHub (or paste a public GitHub/GitLab/Bitbucket URL) and scan from the dashboard.
- Scan your website too. HTTPS and security headers, cookies set before consent, trackers without a consent manager, missing privacy notice or grievance officer, forms with no privacy notice.
- Audit-ready. Framework coverage, printable compliance reports, an audit log, and JSON export.
18 code rules and 21 website checks today, mapped to DPDP, GDPR, SOC 2, HIPAA, PCI DSS, ISO 27001, CCPA and LGPD.
What it isn't: RuleFix doesn't make you "compliant" on its own, and it isn't legal advice. It turns regulatory requirements into concrete code checks and fixes your engineers can act on.
Coming next: RuleFix Agent (AI security and privacy testing of your running app in a real browser, authorized targets only), IDE extensions, CI/CD gates and a CLI.
It's free to start. I'd love your feedback, especially on rules you want us to add next. I'll be here all day answering questions 🙏