EVERY COMPONENT RUNS ON YOUR INFRASTRUCTURE. NO SAAS DEPENDENCY.
);
}
// ---------- Problem section ----------
function Problems() {
const probs = [
{ k: '01', t: 'Security blind spot', d: 'LLMs cheerfully emit SQL injection, hardcoded secrets, weak crypto, and silent command exec. You ship what you can\'t see.' },
{ k: '02', t: 'Compliance gap', d: 'Auditors now ask: was this code AI-generated? Who approved it? No provenance trail, no evidence — you fail the audit.' },
{ k: '03', t: 'Tool sprawl', d: 'Your team uses Cursor, ChatGPT, Claude, Aider, Copilot. Five tools, zero unified signal, and no-one can answer "which AI wrote this?"' },
{ k: '04', t: 'Quality fog', d: 'AI adoption is up and to the right, but you can\'t correlate it to defects, review cycles, or incident root-cause.' },
];
return (
THE PROBLEM
You don't know what your AI wrote. Neither does anyone else.
AI-generated code is already in your repo, your PRs, and your production. The question isn't whether — it's what, by whom, and with what risk.
{probs.map(p => (
{p.k}
{p.t}
{p.d}
))}
);
}
// ---------- How it works ----------
function HowItWorks() {
const [tab, setTab] = useState('solo');
const flows = {
solo: {
accent: 'var(--solo)',
steps: [
['DETECT', 'Extension watches for insertions of 4+ lines'],
['PROXY', 'Local HTTP proxy captures LLM prompt traffic'],
['CORRELATE', 'Match insertion to prompt within ±15 seconds'],
['SCORE', 'AST + regex analysis flags secrets, SQLi, weak crypto'],
['STORE', 'Encrypted local SQLite — never leaves your machine'],
],
},
team: {
accent: 'var(--team)',
steps: [
['DETECT', 'Each engineer\'s extension syncs to the team backend'],
['INDEX', 'Postgres + pgvector for semantic prompt search'],
['DASHBOARD', 'Real-time aggregate metrics update every 5 min'],
['ALERT', 'Slack + email on high-risk insertions'],
['API', 'REST endpoints for CI/CD gating and SIEM ingestion'],
],
},
enterprise: {
accent: 'var(--ent)',
steps: [
['SELF-HOST', 'Docker / K8s in your VPC — zero egress'],
['LINEAGE', 'Neo4j traces prompt → code → PR → deploy'],
['AUTH', 'SAML / OIDC SSO with custom RBAC scoping'],
['COMPLY', 'SOC2, HIPAA, ISO27001 report generation'],
['INTEGRATE', 'Jira, GitHub, GitLab, Jenkins, Splunk, any SIEM'],
],
},
};
const f = flows[tab];
return (
HOW IT WORKS
A local proxy, a code watcher, and a correlation engine.
The pipeline is the same across all three modes. What changes is where the data lives and who can see it.
{['solo', 'team', 'enterprise'].map(t => (
))}
{f.steps.map((s, i) => (
{i > 0 && (
)}
{i + 1}
{s[0]}
{s[1]}
))}
);
}
// ---------- Mode deep-dive teaser ----------
function ModeDeepDive() {
const modes = [
{
key: 'solo', label: 'Solo', color: 'var(--solo)', href: 'solo.html',
for: 'For the individual developer',
headline: 'Your code, your machine, your audit.',
summary: 'A VS Code extension with local encrypted storage. Track every AI insertion offline, with zero egress.',
price: 'Free',
},
{
key: 'team', label: 'Team', color: 'var(--team)', href: 'team.html',
for: 'For the engineering team',
headline: 'Shared visibility. Live alerts.',
summary: 'Real-time dashboard, risk heatmaps, Slack alerts, and a REST API. Ship AI code with the oversight auditors expect.',
price: 'from $99/mo',
popular: true,
},
{
key: 'enterprise', label: 'Enterprise', color: 'var(--ent)', href: 'enterprise.html',
for: 'For the regulated org',
headline: 'Full control. Full lineage.',
summary: 'Self-hosted in your VPC with Neo4j lineage graphs, SSO, and SOC2/HIPAA/ISO27001 alignment.',
price: 'Custom',
},
];
return (
THREE MODES · ONE PRODUCT
Start free. Grow as your org does.
Same detection engine across every mode. Upgrade paths preserve every byte of history.