Enterprise-Grade Security

Total Security Suite
for CI/CD Pipelines

Defphonix embeds four powerful security APIs directly into your DevSecOps workflow — catching secrets, vulnerable dependencies, IaC misconfigs, and compliance gaps before they ever reach production.

Start Free — No Card Needed → Explore APIs

Security APIs

SOC 2

Ready

100%

API-Native

defphonix-scanner — bash

$ defphonix scan --pipeline ./src

▸ Pre-Commit Secret Scanner

Scanning 1,247 files...

✔ 0 secrets found

▸ Dependency Vuln-Checker

Auditing 312 packages...

⚠ 2 HIGH severity CVEs flagged

▸ IaC Misconfiguration Linter

Parsing Terraform / K8s manifests...

✔ No critical misconfigs

▸ SOC 2 Quick-Check

Running compliance assertions...

✔ 94% compliant · Report ready

────────────────────────────────

Scan complete in 3.2s | Risk score: LOW

API Suite

Four APIs. One Unified Pipeline.

Integrate Defphonix in minutes. Each API is independently callable or orchestrated as a single scan — returning structured JSON for your dashboards and alerting systems.

FREE

Pre-Commit Secret Scanner

Detects hardcoded API keys, tokens, credentials, and PII before they're committed to your repository. Supports 130+ secret patterns.

✓ Git hook integration
✓ 130+ regex patterns
✓ JSON output

POST /api/v1/scan/secrets

PRO

Dependency Vuln-Checker

Cross-references your package manifests against the NVD & OSV databases to surface CVEs, CVSS scores, and patch recommendations in real time.

✓ NVD + OSV databases
✓ CVSS scoring
✓ pip, npm, cargo, go

POST /api/v1/scan/dependencies

PRO

IaC Misconfiguration Linter

Statically analyzes Terraform, CloudFormation, and Kubernetes manifests for security misconfigurations against CIS Benchmarks and AWS/GCP best practices.

✓ Terraform + K8s + CF
✓ CIS Benchmarks
✓ Severity levels

POST /api/v1/scan/iac

PRO

SOC 2 Quick-Check

Runs automated compliance assertions across your codebase and infrastructure, generating an auditable PDF evidence report for your SOC 2 Type II readiness.

✓ SOC 2 Type I & II
✓ PDF evidence report
✓ Compliance score

POST /api/v1/scan/compliance

Integrate in 60 Seconds

Drop into any pipeline with a single HTTP call.

import requests

response = requests.post(
    "https://nexus-solution-platform.onrender.com/api/v1/scan/secrets",
    headers={"Authorization": "Bearer YOUR_API_KEY"},
    json={"repo_path": "./src", "branch": "main"}
)
print(response.json())  # {"status":"clean","secrets_found":0}

curl -X POST \
  https://nexus-solution-platform.onrender.com/api/v1/scan/secrets \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"repo_path":"./src","branch":"main"}'

const res = await fetch(
  'https://nexus-solution-platform.onrender.com/api/v1/scan/secrets',
  {
    method: 'POST',
    headers: {
      'Authorization': `Bearer ${API_KEY}`,
      'Content-Type': 'application/json'
    },
    body: JSON.stringify({ repo_path: './src', branch: 'main' })
  }
);
const data = await res.json();

Pricing

Simple, Transparent Pricing

Start free. Scale when you need full pipeline protection.

Free

$0 /mo

Perfect for individual developers and open-source projects.

✓ Pre-Commit Secret Scanner
✓ 1 API key
✓ 100 scans / month
✓ JSON API responses
✗ Dependency Vuln-Checker
✗ IaC Linter
✗ PDF Reports

Get Started Free

Total Security Suite for CI/CD Pipelines