Your AI. Your choice.
Nobody knows your product better than you do. So we do not replace your AI, your tools or your judgement. We give them the product-security context they have been missing.
Standalone MCP
Gives an AI agent security and CRA context for a repository it can already read. Works without an AA-sec account.
Open source
Inspectable, run it yourself.
Repository context
Code and dependency analysis.
CRA framing
Questions shaped by the regulation.
No account
Independent of the platform.
Connected MCP
The same interface, connected to AA-sec. Your agent reads the organisation, product and evidence context it is permitted to see.
Scoped access
Organisation-level permissions.
Live product state
Products, releases, assessments.
SBOM & findings
Components and open vulnerabilities.
Evidence
Documents and decision records.
or both. together.