A full audit to start
We AI audit and pen test your current codebase. Every finding is validated and comes with steps to reproduce it.
Enclave for open source
Open source deserves a security team.
We run an AI audit and penetration test of your codebase, review every PR with findings shared privately, and give maintainers access to agentic penetration testing. We contribute Enclave credits to support the work.
The partnership
We do the security work with you.
We contribute Enclave credits to cover security-agent usage for participating projects, alongside security research and hands-on support from the first finding to the fix.
Every PR reviewed
Enclave reviews each pull request as your project changes and reports security issues privately to your maintainers.
Agentic penetration testing
Your maintainers get access to Enclave’s agentic penetration tests to investigate security risks and validate fixes within the agreed scope.
Who it’s for
The projects other projects rely on.
We work with actively maintained, openly licensed projects that other people build on: libraries, frameworks, developer tools and infrastructure.
If you maintain one, tell us where you need help. We’ll agree on the scope together and shape the support around your project’s needs.
How it works
Your project. Your call.
We work alongside maintainers, not around them. Testing starts with your permission, and sensitive findings stay private while we work on a fix together.
Tell us about your project
Share your repository, your role, and where security support would make a difference. No security team required.
Agree on the scope
Before any testing starts, we agree on the credits, what to investigate, the access we get, testing boundaries and how findings are handled.
Work through the findings
We share findings privately, help with remediation, and coordinate any public disclosure with you. Maintainers decide what ships.
Let’s work together
What are you maintaining?
Apply for contributed Enclave credits and hands-on security help for your open source project. You don’t need a security plan or a security team to apply.
Send us a link to your repository, a little about your role, and where security support would help. We’ll take it from there.
Apply to the programOpens your email app to support@enclave.ai. Prefer a browser? Contact us.
Please don’t include credentials or undisclosed vulnerabilities in your application. We’ll agree on a secure way to share those.