Product
Code review and authorized server assessment, in one workspace.
Vigito reviews GitHub changes with AI assistance, surfaces dependency and security signals, and assesses only servers whose ownership and authorization have been checked. Findings, usage, reports and audit records live in the same place.
Open VigitoGitHub code review
You install the GitHub App on the repositories you choose. Pull request events start a bounded code analysis. Results appear as findings and GitHub check results, and as comments if your installation permissions and settings allow it.
Dependency and security analysis
The same review also runs dependency checks, so a change is looked at together with the packages it brings in.
Authorized server assessment
A server is not scanned until it passes an ownership proof and a separate, signed authorization. The authorization sets the scope and profile of the scan.
Workspace and reports
Findings, remediation context, usage, reports and audit records in one workspace. Roles within your organization decide who can see and do what.
How it works
Start with one repository or a single server.
Connect
Install Vigito's GitHub App on the repositories you pick. You decide what gets connected.
Review
When a pull request opens, Vigito reviews the change and its dependencies and writes the findings back to GitHub as a check result.
Authorize
For a server assessment, you first prove the server is yours, then sign an authorization that sets the scope and profile.
Follow up
Work through findings in the workspace, generate reports and check the audit log to see who did what.
Build with confidence.
Vigito is currently running as a controlled pilot. If you'd like to try it or have a question, write to us.