Quickstart
Add a project and review your first findings in less than 5 minutes.
Connect your repositories
Install Corgea in GitHub, GitLab, Azure DevOps, Bitbucket, or Harness.
Scan from the CLI
Run scans, inspect findings, and apply fixes from your terminal or CI.
Scan your code
AI-native SAST
BLAST finds business logic, authentication, and code vulnerabilities that traditional SAST misses.
Dependency Scanning
Detect vulnerable third-party packages across 25+ languages and ecosystems.
Secret Scanning
Catch hardcoded credentials, API keys, and tokens before they reach production.
Container Scanning
Scan container images for vulnerable OS and application packages.
IaC Scanning
Find misconfigurations in Terraform, Kubernetes, Docker, CloudFormation, and Helm.
Code Quality
Review maintainability, readability, and performance issues alongside security.
Triage and fix
Vulnerabilities Workbench
Search, filter, and prioritize every finding across your projects in one place.
Applying Fixes
Review AI-generated fixes and ship them through a pull request, your IDE, or a patch.
False Positive Detection
Let Corgea use code and infrastructure context to remove noise automatically.
Corgea Agent
Ask questions about scans and findings in chat or directly in pull request comments.
Set and enforce policy
PolicyIQ
Teach Corgea your business context and security architecture for sharper results.
Blocking Rules
Fail builds and block pull requests that introduce unacceptable risk.
SLA Management
Set remediation deadlines by severity and track issues that fall behind.
Work where you build
IDE Extensions
Fix issues in VS Code, Visual Studio 2022, and JetBrains IDEs.
Agentic Integrations
Let Cursor, Claude Code, Copilot, and Codex scan and fix on your behalf.
Model Context Protocol
Connect AI assistants to your scans, issues, and policies over MCP.
Issue Tracking
Sync findings to Jira or Linear and keep status in step with your backlog.
Slack Notifications
Alert the right channel when new issues, fixes, or scans land.
API Reference
Automate scans and pull results with the Corgea API and webhooks.
Administer your organization
User Management
Invite teammates and manage roles, teams, and permission groups.
SSO
Set up SAML or OIDC single sign-on with your identity provider.
Security & Compliance
Read how Corgea protects your code, data, and infrastructure.