Gravion is a lightweight pre-ship security scanner for public GitHub repos. Unlike heavier security platforms, it needs no setup: paste a repo URL and get a readable report with score, severity, confidence, context, and suggested fixes. It helps fast-moving devs, indie hackers, and AI-assisted builders catch obvious mistakes like committedenv files, hardcoded secrets, risky auth patterns, and missing authorization signals before shipping.

Trupeer AI — Create Stunning Demo Video with AI in minutes

Create Stunning Demo Video with AI in minutes

Hey Product Hunt 👋 I built Gravion after seeing how easy it has become to ship code quickly with AI tools, but also how easy it is to miss basic security checks before going live. Gravion is a lightweight pre-ship security scanner for public GitHub repositories. You paste a repo URL, run a scan, and get a readable report with a score, severity, confidence, context, and suggested fixes. It currently looks for obvious issues like committed environment files, hardcoded secrets, suspicious password/account handling, and missing authorization signals. It’s intentionally heuristic and beta-stage, so it is not a replacement for full SAST, dependency scanning, penetration testing, or a professional security audit. The goal is simpler: help fast-moving devs catch embarrassing mistakes before they ship. I’d love feedback on: - false positives - confusing wording - rules/checks you’d want next - whether the report feels useful enough to run before deployment Thanks for checking it out 🙏