One workspace per credential
Every API key and OAuth client belongs to one workspace and carries only the scopes you give it.
DevSecure API
Read findings, start scans, triage issues and receive signed webhooks from your own tools.
Everything the dashboard shows
Repositories, scans, issues and issue groups, autofix jobs, Kubernetes findings, DAST and pentest targets, teams, members and the audit log.
Safe to automate
Cursor pagination, idempotent retries, clear rate limits and one error format for every endpoint.
Signed webhooks
Get scan, issue, autofix and Kubernetes events as they happen, signed with HMAC-SHA256.