Security, explained in plain words

Start here The Sentrint wiki, in reading order. What a security scan checks in a vibe-coded app, what a report tells you, and what happens to your code. 4 min Why Sentrint exists AI and no-code tools ship working apps with real security holes. Sentrint gives non-security builders a fast, honest read on what is exposed. 4 min FAQ & glossary Straight answers to the questions founders ask before running a scan, plus a plain-English glossary of the security terms you will see in a report. 5 min

How a scan works What happens from the moment you sign in to the moment you get a report. Sign in, pick a repo, get a score, a grade, findings and a fix prompt. 5 min Reading your report What the score, the letter grade and the severity levels mean, what to fix first, and how a rescan confirms a fix is really gone. 5 min Security fix prompts: apply, then recheck A copy-paste fix prompt for Lovable, Bolt, Cursor or v0 with every finding, in small steps, so your AI builder fixes one thing at a time. 6 min Plans and what they include One free scan a month, no card, with the full report and the fix prompt. Top-up adds six scans, Founder gives you 36 a month across up to 15 repos. 5 min

For developers

Inside the security engine How the scan works under the hood, the rule families it runs, the AI review layer that filters false positives, and how findings get scored. 6 min Sentrint for developers The severity model in detail, the fix-and-rescan workflow, the embeddable security badge, and where this fits alongside code review and CI. 6 min Run scans from your codebase Create a scoped Sentrint API key, submit a GitHub scan, read findings, and import the API into Postman or Insomnia. 6 min Developer API reference Sentrint API v1 reference. Bearer API key auth, scan submission, findings, pagination, errors and scan deletion, with cURL, Python and Node.js examples. 1 min Run a security scan in GitHub Actions Scan your repo on every push with the Sentrint API and fail the build on Critical or High findings. Workflow file plus Bash, Python and JavaScript scripts. 13 min Security MCP server for Claude Code, Cursor Connect Claude Code, Codex, Cursor or VS Code to Sentrint's MCP server. Setup, browser sign-in, the four tools, limits, errors and security. 1 min

Security for AI-built apps Apps built with Lovable, Bolt, Cursor, Replit and v0 ship the same handful of security holes. What they are, and what each one lets an attacker do. 5 min Common vulnerabilities, explained A plain-English tour of the security holes that show up in AI-built apps, what each one is, how it happens, and what a finding looks like. 11 min

Your code and your data Your repository is never written to our database. What a scan reads, the one piece of code we keep for 30 days, and the rights you have over all of it. 5 min