
Upload a SAST report, a Trivy dependency scan, or both. Findings are merged into one dashboard and a single PDF analysis. Everything is processed locally in your browser; no data leaves your device.
SAST report (.json)
Static application security testing findings
Trivy report (.json)
Dependency, secret and misconfiguration scan
At least one report is required. Upload both to analyse code and dependency risk together.