Questions, answered

Yes — that's who Securie is for. Every finding is written in plain English. Example: 'Your checkout page lets other people read Jane's orders. Click Merge to fix.' If you can read that sentence, you can use Securie.

No. Securie reads your code — it doesn't run it. We never change your code without your explicit approval. Every fix is a proposal (a pull request) that you choose to merge or ignore.

It means you need Securie more, not less. Multiple studies show 45-62% of AI-generated code has security bugs. Securie is purpose-built for AI-built apps.

Honestly, if it's truly a hobby with no payments and no personal data, you can wait. But if even one user pays you or trusts you with their data, the moment you get 'hacked' costs more than a year of Securie. Free during early access removes the decision.

During early access, it's free — no card, no time limit. When we move to paid tiers, everyone from early access gets a permanent founding-rate discount. You'll always be able to afford your account.

No. Early access means we're onboarding our first 1,000-5,000 users before opening publicly. You get the real product, free, with priority onboarding and direct founder contact. The only catch: you're one of the first, so you see us improve over time.

Every finding has a plain-English explanation and a suggested fix. If you still don't understand, you can ask us directly — paid tiers include founder-to-founder Slack access.

Don't merge it. Every proposed fix sits as an open pull request until you're comfortable. You can also reply to the PR with a question and we'll walk you through it.

We read your code to analyze it, yes — Securie reads it inside a sealed secure environment you can verify remotely. On enterprise plans, the analysis runs inside your own cloud account. Your code never ends up in a training dataset.

No. Securie runs outside your app (on GitHub / Vercel, at code-review time). It never runs inside your production runtime. Your users never notice Securie is there.

Yes. One click in GitHub / Vercel settings. We stop watching your repo and your account data is deleted within 30 days. No lock-in.

Stripe handles payment-card compliance. Securie handles the rest of your app: leaked keys, database misconfigurations, broken logins, AI-feature bugs, and the 95% of security that isn't payment-related.

Vanta collects compliance evidence. Securie does the actual security work that produces the evidence. They complement each other. Many customers use both.

ChatGPT is a general-purpose model that will tell you what it sees in the code you paste. Securie runs specialized security models, verifies findings by actually running the exploit in a sandbox, and opens a pull request with a tested fix. It's the difference between asking a friend for health advice and going to a doctor.

They work if your code is written by engineers who review findings and apply fixes. Vibe-coded apps are built by non-engineers who find those tools' output unreadable — 70% false positive rate, acronym-heavy, no fix suggestions. Securie is designed for the apps those tools don't fit.

Add your co-founder as a collaborator. They see the code-level detail. You see the plain-English summary. Same installation, different views.

Yes. Every finding explains the concept. After 3 months using Securie, most founders can intuit common security patterns. It's an education by osmosis, and you can dive deeper into the guide linked on each finding.

Yes. Securie produces evidence that maps directly to SOC 2 controls, GDPR Article 32 (security measures), and HIPAA Security Rule. We have dedicated guides at /compliance for each framework.

Yes. We have customers on every continent. Our compliance coverage includes EU (GDPR + AI Act), UK, Canada, Australia, Brazil, India, Singapore, and others. See /regions for your specific country.

First scan completes in under 5 minutes after install. Most apps have 2-5 findings surface in the first 24 hours. Auto-fix pull requests typically land the same day.

Use our free tools instead — /signup runs in your browser in 30 seconds and tells you whether your Supabase is public, no signup required.

Securie is a Delaware C-corp. We publish a public AI Bill of Materials, a transparency report with live metrics, and a press kit. See /press for details.

Yes. Senior devs appreciate the sandbox-verified findings (no false positives) and the auto-fix PRs (saves time). We built Securie to be useful for both non-technical founders AND experienced developers.