English
Nederlands
Deutsch
Français
Español
Português
Italiano
Polski
中文
हिन्दी
Scan
€199,00
excl. VAT · €240,79 incl. VAT
Automated controls and human review, with risks prioritized.
One repository, maximum 25,000 lines of own code.
Order immediatelyBinadit Code Scan
Do not let an old flaw define your reputation.
Things went well for years. Until AI started looking.
The vulnerability in PHP lasted about 14 years, the vulnerability in Linux lasted 9 years. Thanks to AI, such old mistakes now surface much faster. Just because things have always gone well for you is no guarantee that things will continue to go well. Have your code checked before someone else finds the error. Fixed price, order immediately and receive your report within 7 days.
- No account required.
- We sign an NDA.
- No attacks on your systems.
Old leaks are now coming to the surface.
OpenBSD, 27 years
FFmpeg, 16 years old
PHP, about 14 years
Linux, Copy Fail, 9 years
Linux, CVE-2026-31695, almost 5 years
This software ran for years, was used by many people and seemed safe. AI has made finding faults much faster, for researchers and for attackers. The PHP vulnerability went from discovery to working attack in about a week.
This is just the beginning. The British NCSC expects a wave of urgent updates in all types of software. If this can happen in commonly used software, then it can also happen in your company's code.
Read what's going on nowWhat this means for you as an entrepreneur
- Customer data: data can end up on the street.
- Turnover: your website, webshop or application can go down.
- Trust: Customers ask what happened and whether they will still stay with you.
- Costs: repair work, research and legal assistance are in addition to your regular work.
- Supervision: insufficient security may result in a fine.
Attackers don't have to pick you personally. After the PHP leak, attack attempts reached millions. So "it's always gone well" is not security. Don't wait for an incident to discover what's in your code.
What we check
- Access control and authorization
- SQL injection, cross-site scripting and other input errors
- Keys and passwords in code and Git history
- Vulnerable dependencies
- File uploads, sessions and authentication
- Business logic and error handling
- Supabase policies, if they are in the repository or are provided
Choose your control
Audit
€399,00
excl. VAT · €482,79 incl. VAT
Everything from Scan, plus audited findings, impact and fix instructions per finding.
One repository, maximum 25,000 lines of own code.
Order immediatelyCompleet
€899,00
excl. VAT · €1.087,79 incl. VAT
Everything from Audit, plus patch proposals for critical and high findings, one rescan within 30 days, and a scan statement.
One repository, maximum 25,000 lines of own code.
Order immediatelyScan
€399,00
excl. VAT · €482,79 incl. VAT
Automated controls and human review, with risks prioritized.
One repository, maximum 50,000 lines of own code.
Order immediatelyAudit
€899,00
excl. VAT · €1.087,79 incl. VAT
Everything from Scan, plus audited findings, impact and fix instructions per finding.
One repository, maximum 50,000 lines of own code.
Order immediatelyCompleet
€1.799,00
excl. VAT · €2.176,79 incl. VAT
Everything from Audit, plus patch proposals for critical and high findings, one rescan within 30 days, and a scan statement.
One repository, maximum 50,000 lines of own code.
Order immediatelyExternal packages and generated files do not count. We offer an additional price for larger scopes. If you do not accept it, you will receive a full refund.
Not every leak is in your code.
The PHP leak and the Linux leaks are in software on the server. A code scan won't find it. Therefore, add a server scan to every package, from €199 excl. VAT. You give us temporary read access and we won't launch any attacks.
View the server scanWhy you want to know this
- Reputation: a leak about you quickly becomes a story about you. By finding errors earlier, you reduce the chance of reputational damage.
- Data leaks and fines: a data leak costs time, money and trust. If there is insufficient security, the Dutch Data Protection Authority can impose a fine. Article 83 GDPR mentions up to €10 million or 2% of global annual turnover, whichever is higher. HAN was fined €175,000 after misuse of a leak in a web form.
- Customers and buyers: with a report you show what has been checked and what has subsequently been resolved.
It's about what you have demonstrably done.
The GDPR and the Cybersecurity Act require appropriate measures that match your risks. Article 32 GDPR mentions regular testing and assessment of those measures. A report helps show what checks you have done, what you have found and resolved. A scan is not a guarantee and does not replace a full security policy. Not every company itself is covered by the Cybersecurity Act, but customers who are covered can also ask suppliers for proof.
That's how it works
- Choose your package and pay immediately.
- Grant temporary read access to your repository, or upload your code.
- We carry out automated checks and human review.
- You will receive a report via a secure link.
- We will revoke access and delete your code no later than 30 days after delivery.
Do you want an NDA first? We will arrange this before you grant access.
Be careful with your code
Your code is confidential. We sign an NDA, work with temporary access, store your code encrypted and do not execute it. Your code does not go to external services and we only use it for your assignment. Upon request, we work under a processing agreement.
What the scan is not
This is not a pen test and not a guarantee that your software is safe. We don't test your live environment unless you choose the server scan, and even then we don't do any attacks. We only see settings that are only in a dashboard if you provide them.
Frequently asked questions
Is this only for code written with AI?
No, we check all code, including old code written by humans.
Do I need to create an account?
No, you order as a guest and only fill in your details.
Can I order for business purposes?
Yes, you can put company name, address, VAT number and a reference on the invoice.
Can I order as a private individual?
Yes. You will see prices including VAT and in principle you have a 14-day reflection period. Read the conditions for the consequences if we have already started at your request.
What is the difference with a pen test?
A pen test attacks your running system. We read your code and check the configuration during the server scan.
Can you find PHP2Shell or Fragnesia with the code scan?
No, that is what the server scan is intended for.
How do you handle my code?
Your code is confidential, only those working on your assignment can access it and access is temporary. We keep your code encrypted, do not execute it or send it to external services. We will remove it no later than 30 days after delivery, or earlier upon request.
Will you sign an NDA?
Yes. Request our NDA on your order page or upload your own NDA. We will arrange this before you grant access.
What if you find a critical leak?
We will then warn you immediately and do not wait until the report is ready.
Do I comply with the GDPR or NIS2?
A scan alone cannot guarantee this. The report does help to demonstrate your measures.
Do you also apply fixes?
Complete contains patch proposals. The customer assesses and places them himself, unless we agree otherwise.
Can I see a sample report?
No, we do not share reports. Customer reports remain confidential.