SUBMIT AN APPLICATION

The platform opens soon

Below you can see how submission will work: five steps, with the second one previewed. The audit request already works, though — send us the details of your application and we tell you straight away which risk class it falls into.

Preview · not working yet

Step 2 of 5

Code and staging

Choose how we see the code. Whichever way you pick, we have read access only, and the code does not stay with us after the audit.

How we connect

  • Audit inside my own GitHub (recommended)You add a configuration file to the repository. The code never leaves your GitHub. We receive only signed results.
  • Read-only GitHub / GitLab connectionThe fastest way. You choose which repositories we see.
  • Upload an archiveIf you do not use git. No automatic re-checking.

Add this file to your repository

.github/workflows/codeaudited.yml
uses: codeaudited/audit-action@v1
with:
  certificate-request: PRV-REQ-7Q2K

Staging environment (optional, for auditing the live site)

Staging address

https://staging.acme-app.com

Proof of ownership: add this TXT record to your domain’s DNS. Without it we do not touch your site — we audit the code only.

codeaudited-verification=7f3c9a21e0b4d58e

Awaiting DNS confirmation

The staging audit is gentle (passive only, rate-limited) and never touches your production.