Product
Six parts. Every page says what that part does not do, because the boundary is the half that tells you whether this fits.
Findings
Everything wrong with what you build, in an order you can work down.
A first scan produces hundreds of findings and no way to tell which of them matters. Most teams triage for a week, lose interest, and never open the tool again.
FixPilot
The change that fixes it, with a test that proves it.
Knowing about a vulnerability is not the work. Writing the patch, not breaking anything, and getting it reviewed is the work — and it is the part that does not happen.
Evidence
A signed record that a specific thing was fixed, that anybody can check.
Your customer’s security questionnaire asks whether you remediate vulnerabilities. You say yes. They have no reason to believe you, and you have nothing to show them.
Reports
The document somebody outside your team actually asked for.
A board, an insurer or a customer asks for a security report. Exporting a findings list as a PDF answers a different question and everybody can tell.
Protect
Your dependencies and your AI endpoints, watched continuously.
The package you installed last year was taken over last week. The MCP server somebody stood up for a demo is still listening, with no authentication in front of it.
Managed
When you would rather somebody else did it.
Plenty of teams do not have anybody whose job this is. A tool that produces work for a person who does not exist has produced nothing.