BugFinder
Triage Console
Human-in-the-loop security triage

AI Agent proposes.
Code confirms.
You decide.

Every finding here is machine-confirmed by a deterministic oracle — replayed leaks, executed payloads, out-of-band callbacks — then held for your review.

oracle   IDOR · A/B/anon canary replay
browser  XSS · headless execution proof
differ   SQLi · boolean + time-based
oob     SSRF · callback correlated

Sign in

Access the triage console.