Repository Security Scanner
Know what's hiding
in your code
Repoloom scans your repositories for CVEs, exposed secrets, and security anti-patterns — before they reach production.
7 days free · No credit card required
Capabilities
Everything to secure your stack
Dependency Scanning
Detect known CVEs across 12 package ecosystems before they become incidents.
Secret Detection
Surface exposed API keys, tokens, and credentials hiding in your codebase.
Static Analysis
31 rules catch SQL injection, XSS, command injection, and other anti-patterns across 8 languages.
EOL Detection
Track end-of-life and deprecated packages so you never ship on abandoned foundations.
How it works
Three steps, under a minute
Connect
Link your GitHub account with read-only access. We never write to your repositories.
Select
Choose which repositories to monitor. Set custom scan frequency for each.
Scan
Get actionable results in seconds, prioritized by severity and exploitability.
Pricing
Start free, scale when ready
Every plan includes a 7-day free trial. No credit card required.
- Dependency scanning
- Secret detection
- Basic SAST (5 rules)
- 5 manual scans/month
- EOL detection
- Export reports
- Dependency scanning
- Secret detection
- Full SAST (17 rules)
- 20 manual scans/month
- EOL detection
- Export reports
- Everything in Medium
- Container scanning
- 100 manual scans/month
- Priority support
- Custom integrations
- SLA guarantee
FAQ