Your security team,
until you hire one.
Agentic AI-powered penetration testing. Static code analysis. Dependency and privacy scanning. MCP-native. Investor-ready reports. All on your desktop.
macOS (Apple Silicon) · Windows (x64) · v0.2.1 · CLI also available
No security expertise needed
AI reads every vulnerability found by the scanners and explains it in your terms — based on how much technical knowledge you have. You don’t need to be tech-savvy to ship your ideas in peace.
Local-first
Your code never leaves your machine. No cloud uploads, no third-party access. Keep your sensitive codebase private while you scale.
Investor-ready reports
When a client or VC asks about your security posture — one click generates a professional report. Go from “we’ll get to it” to “here’s our latest scan” in seconds.
API keys, tokens and passwords committed by accident — the number-one way small teams get breached. Trojan finds them in your history, not just the latest commit.
Known vulnerabilities in the open-source packages you install, matched to public advisories — with the safe version to upgrade to.
Injection, broken auth, unsafe defaults — the patterns attackers probe for first. Trojan reads intent, not just keywords.
Every finding explains the risk in words a founder can act on, and the exact change for the engineer. No CVE jargon required.
| No. | Coverage | Value | Remark |
|---|---|---|---|
| 01 | Detection rules | 3,400+ | Updated weekly from public advisories |
| 02 | Languages supported | 14 | JS/TS, Python, Go, Ruby, Rust, Java… |
| 03 | Median scan time | 4.2 s | On a 100,000-line repository |
| 04 | Code sent to our servers | 0 bytes | Scanning runs entirely on your machine |
Five levels.
Ranked, not colored.
No wall of red. Trojan sorts every finding by how likely it is to be exploited and how much it would hurt — so you always know what to do first, and when it's safe to stop.
Start free. Upgrade when you need more.
Full scanning engine. Up to 5 reports. No card required.
Full reports, AI explanations, fix instructions, MCP integration.
Pro features for your whole team. One subscription, everyone covered.