diff --git a/README.md b/README.md index 0c68862..2c55e68 100644 --- a/README.md +++ b/README.md @@ -1,10 +1,12 @@ -# CodeGuard +# CodeSift AI -Automated security and code-quality review platform for pull/merge requests, with AI analysis, optional AI remediation, custom policy enforcement, and developer-focused triage UI. +> **AI-Powered Code Security for Modern Teams** -## What CodeGuard Does +CodeSift AI is an autonomous DevSecOps SaaS platform that helps developers detect security vulnerabilities, code-quality issues, and risky changes in GitHub pull requests, understand the risks, and safely fix them. -CodeGuard connects repositories, receives webhook events, analyzes code changes, stores findings, and surfaces actionable review output in a dashboard. +## What CodeSift AI Does + +CodeSift AI connects repositories, receives webhook events, analyzes code changes, stores findings, and surfaces actionable review output in a dashboard. Core outcomes: diff --git a/client/index.html b/client/index.html index 5ac9c7f..10503cb 100644 --- a/client/index.html +++ b/client/index.html @@ -3,6 +3,8 @@
++ {item.description} +
++ Add an autonomous AI-powered security layer to your development workflow. No configs required. +
++ AI-powered security for modern software development. +
+© {new Date().getFullYear()} CodeSift AI. All rights reserved.
++ User-controlled input reaches a database query without parameterization. +
++ This pull request introduces several security risks that should be addressed before merging. +
++ Primary concerns include raw string interpolation in query builders. +
++ {step.description} +
++ A deterministic developer lifecycle from pull request creation to secure merge. +
++ Transparent plans for developers and engineering teams. +
++ {plan.tagline} +
++ Manual pull request reviews prioritize business logic, code style, + and fast turnaround. Subtler security flaws—like indirect taint flows, + unparameterized queries, and leaky dependencies—frequently pass review unnoticed. +
++ CodeSift AI adds an automated security layer to your existing pull request workflow. +
++ Continuous deep analysis:{" "} + Inspects every changed line and dependency before pull requests merge into main branches. +
++ Deterministic rules + semantic intelligence:{" "} + Combines syntax taint analysis with contextual AI explanations to eliminate noisy alerts. +
++ Remediation in context:{" "} + Provides line-specific fixes directly in GitHub comments with full architectural explanation. +
++ Real pull request data, deterministic policy status, and verifiable AI patch generation. +
++ Compromised token signatures allow session spoofing across + production microservices without needing valid credentials. +
++ Migrate secret reference to environment variable and add + automated pre-commit entropy verification. +
++ Hardcoded authentication tokens in source files are exposed to anyone + with repository access and cannot be rotated without code deployments. +
+
+ Replaces static token string with process.env.SESSION_SECRET and adds an explicit check during application bootstrap.
+
+ We hold our platform to the same uncompromising security engineering standards we enforce on your repositories. +
++ {item.description} +
++ Built for modern development workflows +
+