CybeDefend

Find, Fix, Repeat.Secure your

G25/5See the full platform

Fixed in the same session

Partners, programs and investors

La French TechGoogle for StartupsBpifranceEuraTechnologiesCRIStALCNRSScalewayCyber Campus de LilleHodéfiElevenLabs
Why flaws ship

Your agent writes the line. Nobody reads it.

Thousands of lines a day. No review catches the flaw.

Shipped with the flaw
Claude CodeAgent session, alone

Thinking ...

Update ( src/db/users.repo.ts )
db . query('SELECT * FROM users WHERE id = ' + id)

Tests passing

Opening pull request #482

» auto modeVibeDefend: off

A rules file does not fix it.

The rule was in its file, exact. The agent broke it anyway.

M06 · LOY-01Loyalty pointsThe rule was in its file

The company ruleOne loyalty point per euro paid in money. None on the gift-card share.

ViolatedA rules file
What VibeDefend changes

Two minutes to install.

One command. It detects every agent on your machine.

npx -y @cybedefend/vibedefend@latest install
Claude CodeCursorWindsurfGitHub CopilotOpenAI Codex

Your rules arrive at the line.

Mined from your code, plus OWASP, SOC 2, GDPR, ISO 27001.

Claude CodeVibeDefend
vibedefend . business-rules.inject
tenant scopingsoft-deleteaudit-on-write
vibedefend . security-rules.inject
OWASPSOC 2GDPRISO 27001

Thinking ...

Update ( src/db/users.repo.ts )
db . query('SELECT * FROM users WHERE id = ' + id)
vibedefend . scan.diff
Code AnalysisIaCSecrets

new finding in diff → SQL Injection

» auto modeVibeDefend active

Scanned before the pull request.

One finding, with its fix. The agent rewrites the line.

src/db/users.repo.tsdiff scanned in the session
db.query('SELECT * FROM users WHERE id = ' + id)
db.query('SELECT * FROM users WHERE id = $1', [id])

SQL Injection, fixed at the line it edited

Rule LOY-01 applied exactly

Dangerous commands never run.

A schema drop, a destructive sudo. Stopped before they fire.

Agent session · guarded
sudo rm -rf /etc/

BLOCKEDdestructive sudo outside the project· no-destructive-sudo

DROP SCHEMA public CASCADE

BLOCKEDschema drop against a live database· no-destructive-sql

requests-toolbelt-async

BLOCKEDpackage does not exist on the registry· package does not exist

Every finding, live in the session.

One dashboard for your team. The same list, inside the agent.

CybeDefend project view with live findings
Every finding, with its fixThe agent reads this list live
What you get

What it covers.

  • Business logicYour own rules, mined from your code.
  • ComplianceOWASP, SOC 2, GDPR, ISO 27001, in the session.OWASPNISTMITRECycloneDX
  • Dangerous actionsChecked before the command runs.
  • Every scannerSAST, SCA, secrets, IaC and CI/CD, live.
  • MCP securityEvery MCP server the agent talks to, checked.
The platform

One layer. Your entire AppSec stack.

The best open-source scanners, enriched with our rules, plus our in-house engines.

Business logicOur engine

The flaws nobody else sees

CybeDefendCybeDefend engine
Code

Our own rules, Rust included

OpengrepOpengrepCybeDefendCybeDefend engine
Containers

Images scanned continuously

TrivyTrivyCybeDefendCybeDefend engine
Dependencies & licenses

Vulnerability database maintained by us, licenses included

syftosvCybeDefendCybeDefend engine
Secrets

Leaks stopped before the commit

GitleaksGitleaksCybeDefendCybeDefend engine
Infra & CI/CD

IaC and pipelines locked down

KICSKICSCheckovCheckovTrivyTrivyCybeDefendCybeDefend engine
CybeDefend
The code graph
Business logicOur engine

The flaws nobody else sees

CybeDefendCybeDefend engine
Code

Our own rules, Rust included

OpengrepOpengrepCybeDefendCybeDefend engine
Containers

Images scanned continuously

TrivyTrivyCybeDefendCybeDefend engine
Dependencies & licenses

Vulnerability database maintained by us, licenses included

syftosvCybeDefendCybeDefend engine
Secrets

Leaks stopped before the commit

GitleaksGitleaksCybeDefendCybeDefend engine
Infra & CI/CD

IaC and pipelines locked down

KICSKICSCheckovCheckovTrivyTrivyCybeDefendCybeDefend engine

Code · Business logic · Containers · Dependencies & licenses · Secrets · Infra & CI/CD · Opengrep · Trivy · KICS · Checkov · Syft · OSV · Gitleaks · The code graph · CybeDefend engine

Measured, not promised

Measured on a real codebase.

Three agents, blind audits, everything public.

0%of your rules followed exactly12% without it
$0saved a year, for twenty developers×37 on the licence and the tokens
2 minto install, one commandno card, no pipeline
github.comCybeDefend/vibedefend-xpApache-2.0

The study behind the numbers

Three agents, the same tickets, one variable.

Rerun it yourself. Protocol, tickets and audits are public.

  • Three armsThe same agent with nothing, with a rules file, with VibeDefend.
  • Same tickets, same backendThe same realistic tickets, on the same retail codebase.
  • Blind auditsAuditors grade every diff without knowing which arm wrote it.
Open the protocol on GitHub

Voices

They ship with it every day.

Vulnerability analysis and remediation have become significantly faster. We save valuable time every day.
OlivierTech Lead, Koddex

Start free

Free to start. The whole platform.

No card, no time limit.

€0no card

  • 10 static scans
  • 50 AI credits
  • Access to the whole platform
  • Your first scan unlocks the promo code

Prefer to see it on your repo first?

Twenty minutes with a founder, on your repo.

Book a demoRead the study and reproduce it36 pages, 90 transcripts, blind audits.

Lives in the tools you already use.

Claude CodeClaude CodeCursorCursorWindsurfWindsurfGitHub CopilotGitHub CopilotOpenAI CodexOpenAI CodexGoogle GeminiGoogle GeminiClineContinueZedGoogle AntigravityVisual Studio CodeVisual Studio CodeJetBrainsJetBrains
GitHubGitHubGitLabGitLabAzure PipelinesAzure PipelinesJenkinsJenkinsAzure DevOpsAzure DevOpsBitbucketBitbucketCircleCICircleCITeamCityAtlassian BambooCursorCursorWindsurfWindsurf

Install VibeDefend in 5 seconds.

One command wires every coding agent on your machine to CybeDefend.

Works with all your agents