SUBMIT AN APPLICATION
The platform opens soon
Below you can see how submission will work: five steps, with the second one previewed. The audit request already works, though — send us the details of your application and we tell you straight away which risk class it falls into.
Preview · not working yet
Step 2 of 5
Code and staging
Choose how we see the code. Whichever way you pick, we have read access only, and the code does not stay with us after the audit.
How we connect
- Audit inside my own GitHub (recommended)You add a configuration file to the repository. The code never leaves your GitHub. We receive only signed results.
- Read-only GitHub / GitLab connectionThe fastest way. You choose which repositories we see.
- Upload an archiveIf you do not use git. No automatic re-checking.
Add this file to your repository
.github/workflows/codeaudited.yml uses: codeaudited/audit-action@v1 with: certificate-request: PRV-REQ-7Q2K
Staging environment (optional, for auditing the live site)
Staging address
https://staging.acme-app.com
Proof of ownership: add this TXT record to your domain’s DNS. Without it we do not touch your site — we audit the code only.
codeaudited-verification=7f3c9a21e0b4d58e
Awaiting DNS confirmation
The staging audit is gentle (passive only, rate-limited) and never touches your production.