How Anchorscape Works
Scan your code for vulnerabilities. Fix them automatically. Re-scan to catch deeper issues. Deploy or push back to GitHub.
Scan Your Code
Go to and upload your code. You have four options:
Copy/paste directly into the editor
Enter a repo URL to scan
Upload a project ZIP (up to 16MB)
Connect GitHub and pick a repo
Choose a scan type:
Quick Scan
~30 sec · No account neededFast AI analysis. Good for a quick health check. Report only — no auto-fix.
Deep Scan
~2-3 min · No account neededMulti-agent with web search for CVEs and advisories. Report only — no auto-fix.
Dual Agent Scan
~3-5 min · Account requiredTwo agents scan in parallel. Stores your code so you can fix issues afterwards.
Multi Agent Scan
~5-10 min · Account requiredFour specialized agents (security, performance, architecture, gap analysis). Most thorough.
Review Your Report
After the scan completes, you'll see a report page with:
Each finding shows the severity (Critical, High, Medium, Low), the exact file and line number, a description of the issue, and a recommendation for how to fix it.
Click the tabs at the top to switch between Security, Performance, Architecture, Gap Analysis (what's missing), and Architecture Diagram views.
Fix Issues Automatically
Below your report, you'll see the "AI Auto-Fix Available" panel. Here's how to use it:
- Filter by severity — Use the buttons (Critical, High, Medium, Low) to focus on what matters most
- Select issues — Click each issue to select it, or use "Select All"
- Click "Fix N Issues" — This spins up an isolated environment with your code
- Watch progress — You'll see real-time updates: which file is being edited, which tool the AI is using, and a running count of issues fixed
What happens behind the scenes
An AI agent boots up in an isolated container with your code. It reads files, understands the codebase structure, then makes targeted edits to fix each issue. It runs your build and tests before and after fixing to make sure nothing breaks.
Export Your Fixed Code
When fixing completes, you'll see the "What's Next?" panel with five options:
Complete fixed codebase as a ZIP archive. Unzip and replace your project.
Unified diff file. Apply it with "git apply patch.diff" to see exactly what changed.
Push fixes directly to your GitHub repo. Select repo and branch, then click create.
Deploy the fixed code to our managed hosting. Live in minutes with automatic SSL.
Run another scan on the fixed code to catch deeper issues. Up to 5 iterations.
Re-scan and Iterate
No single scan catches everything. Security scanning is iterative — each pass reveals issues that were hidden behind the ones already fixed.
The Iterative Loop
Click "Re-scan Fixed Code" after any fix session. A new report will be generated — it focuses only on findings (no architecture diagrams or gap analysis, since those don't change). You can re-scan up to 5 times. After that, run a fresh full scan for comprehensive coverage.
Each iterative report shows a banner with the pass number and a link back to the original full report.
Quick Links
Frequently Asked Questions
Ready to secure your code?
Start with a free scan — no account required.