Hey Product Hunt 👋 I built Gravion after seeing how easy it has become to ship code quickly with AI tools, but also how easy it is to miss basic security checks before going live. Gravion is a lightweight pre-ship security scanner for public GitHub repositories. You paste a repo URL, run a scan, and get a readable report with a score, severity, confidence, context, and suggested fixes. It currently looks for obvious issues like committed environment files, hardcoded secrets, suspicious password/account handling, and missing authorization signals. It’s intentionally heuristic and beta-stage, so it is not a replacement for full SAST, dependency scanning, penetration testing, or a professional security audit. The goal is simpler: help fast-moving devs catch embarrassing mistakes before they ship. I’d love feedback on: - false positives - confusing wording - rules/checks you’d want next - whether the report feels useful enough to run before deployment Thanks for checking it out 🙏

Gravion

Repository Security Scan

Repository Security Scan

Forum Threads

What was your first security score on your repo? Did you find gravion useful?

Forum Threads

What was your first security score on your repo? Did you find gravion useful?