Launching today
Worktr
Shift-left security for your project
2 followers
Shift-left security for your project
2 followers
Worktr is a native macOS app that scans your local repositories for leaked secrets, vulnerable dependencies and risky configuration. Security tools are excellent, but each has its own install, flags and output. Worktr puts 9 trusted open-source scanners behind one button, stops secrets at commit time with Git hooks, and gives AI agents a CLI to scan and fix their own code. Scans run locally. Pay once, updates included.
Payment Required
Launch Team
Render Sandboxes: a computer for every agentRun untrusted code safely. Idle sandboxes cost nothing
Promoted
Hi Product Hunt! I'm the maker of Worktr.
AI agents now write code faster than most of us can review it. A leaked key, a vulnerable dependency or an unsafe CI workflow rarely looks serious in a diff, and it can slip through easily when you're moving fast.
The tools to catch these problems already exist, and they're excellent. But each one has its own install, flags and output, so running them becomes the task you keep postponing. I built Worktr to remove that friction.
With one button, it runs 9 open-source scanners on your local repository, including Gitleaks, Trivy and Semgrep, and turns the results into a single list. It also includes:
- Git hooks that stop a commit or push containing what looks like a secret
- A comparison showing what a branch introduces and what it fixes
- A CLI for your terminal, your AI agents and your CI
- A hub of 45 security skills for AI agents
- Fix with Claude, which edits in a separate worktree so you can review the diff and a new scan before merging
Scans run locally on your Mac. The Claude features are optional and use your own Anthropic account, and Fix with Claude sends the repository's code to Anthropic under that account.
It's a one-time purchase with future updates included, and it requires macOS 15 or later.
For the Product Hunt community: use the code PRODUCTHUNT50 at checkout to get 50% off. It's limited to the first 5 people, so once it's gone, it's gone.
I'd love your honest feedback: what's still missing for this to fit your workflow? I'll be here all day answering questions.