KodeShield documentation
Build security into every commit.
Everything you need to connect your code, detect risk, prioritize findings, and ship verified fixes with KodeShield.
Explore the platform
Find the guide for your workflow
Start with the platform, then move into scanning, remediation, and automation as your security program grows.
Platform quickstart
Create your workspace, connect a repository, and run your first security scan.
Read guide ScanApplication security
Understand SAST, dependency, secret, IaC, container, and dynamic scanning.
Read guide RemediateFindings and AI fixes
Prioritize vulnerabilities, generate fixes, and verify remediation evidence.
Read guide AutomatePolicies and integrations
Add security gates and connect your source control and delivery workflows.
Read guideQuickstart
Run your first scan
Go from a new workspace to actionable security findings in three steps.
- 01
Create your account
Set up your organization and invite the people who manage application security.
- 02
Connect a repository
Authorize your source-control provider and choose the repositories to protect.
- 03
Start a scan
Select scan types, review prioritized findings, and generate a verified fix.
Scanning
One view across your attack surface
SAST
Find insecure code patterns before they reach production.
SCA
Identify vulnerable open-source packages and transitive dependencies.
Secrets
Detect exposed credentials, tokens, and sensitive material.
IaC
Review infrastructure definitions for risky cloud configuration.
Containers
Inspect images, operating-system packages, and build layers.
DAST
Test running applications and APIs from an attacker’s perspective.
Remediation
Move from finding to verified fix
KodeShield groups security context, exploitability, ownership, and remediation in a single workflow so teams can fix the issues that matter first.
Prioritize by risk
Generate a fix
Verify the result
Automation
Put security controls in the delivery path
Policies
Set severity thresholds, ignore rules, retention windows, and scan requirements.
Integrations
Connect source control, issue tracking, messaging, and incident-response tools.
Reports
Generate security posture and executive summaries on demand or on a schedule.
Role-based access
Control who can administer settings, trigger scans, and manage findings.
TypeScript SDK
Automate with the KodeShield API
Use the official SDK to work with repositories, scans, findings, policies, schedules, integrations, reports, and analytics.
npm install @kodeshield/sdk
import { KodeShieldClient } from '@kodeshield/sdk';
const client = new KodeShieldClient({ apiKey });
const { repos } = await client.repos.list();
await client.scans.create({
repoId: repos[0].id,
types: ['sast', 'sca', 'secrets'],
});Ready to secure your first repository?
Create an account to explore KodeShield, or book a guided walkthrough for your team.