For developers and engineers

Become a CodeAudited auditor

The AI models find a lot. The signature, though, belongs to a person. We are looking for engineers who read code and can tell a real finding from noise.

What an auditor does

You review what the machines found

Three independent AI models and our tools have already been through the code. You confirm or reject every serious finding — with file, line and scenario.

You find what they missed

Whatever has no pattern: payment logic, tenant isolation, permissions checked on the screen but not on the server.

You sign

At Silver and Gold the report carries your name. That is what the client pays for: not the AI — the person who puts their signature on it.

What you get

You sell nothing
No chasing clients, no proposals, no chasing payments. The job arrives ready, with stack, size and deadline.
We pay you, not the client
The fee is agreed before you take the job and paid from a central fund. The client never pays you directly — which is why you can tell them "no" without a second thought.
You choose what you take
You see the job without the client's name and decide whether it suits you. Work from wherever you like, on your own hours.
Your name on a public record
Every signed report is logged in the registry. A CV nobody has to take on trust: it can be checked.

Price is never the selection criterion. We choose on the quality of your work and your availability. If we picked the cheapest, we would teach the pool to cut hours — and fewer hours make a worse audit.

How you get in — four steps

Anyone can apply. Only those who pass the test get work.

  1. 01

    Application

    This one. A few details, your experience, your public code and a conflict declaration.

  2. 02

    Documents

    Engagement contract, confidentiality, a full conflict declaration, tax details for invoicing. Signed before any access.

  3. 03

    The test — the only thing that counts

    An application with flaws we already know, eight hours within five days. We measure what you find and how well you evidence it — and we deduct for every false finding. Tests run in cycles; we will write when the next one opens.

  4. 04

    Probation

    Your first two real audits are double-checked by a lead auditor. After that you work on your own.

Three levels

R1

Probationer

You take Silver, double-checked. Everyone starts here, whatever their experience.

R2

Auditor

Silver on your own, Gold as a team member. After two clean audits.

R3

Lead

You lead Gold teams, double-check newcomers, rule on appeals. With a track record and approval.

The rules that are not negotiable

They are why your signature is worth something. They apply to us too.

  • You do not audit an application you or your company built.
  • You do not audit a direct competitor. The audit is not a weapon.
  • You do not audit a client of yours, current or from the last two years.
  • You do not sell fixes to a client you audited — neither you nor your company.
  • You declare every conflict before you accept. Concealment means immediate removal and a cancelled fee.

What you see and what you do not

You see the criteria of the standard, what the tools and the AI found, and the client's code — read-only, and only for the duration of the job.

You do not see the instructions to the models, the internal thresholds or the test applications. The method stays confidential, so nobody learns how to pass it.

Your application

About five minutes. Nothing you write here binds you — the contract does, and it comes later.

Who you are

Applying as

Needed before your first fee, not now.

Your experience

GitHub, GitLab or a site with your work. We look at how you write, not how many stars you have.

Technologies you read comfortably

At least one.

Where you are strongest (optional)

e.g. OSCP, CISSP, CEH, IAAP CPACC. Not a requirement.

References (optional)

Two people who have seen your work. You can give them later — they are asked for before the test.

Conflict declaration

One company per line. With these names we exclude you automatically from jobs you must not see — before we show them to you. If you have none, leave it empty.

Anything you want us to know (optional)

Three declarations

Privacy policy