Introduction

Pinelight Labs is an AI-powered code security platform that detects vulnerabilities in your codebase using AST-based static analysis.

What is Pinelight?

Pinelight helps development teams catch security vulnerabilities before they reach production. Our engine runs 10 security detectors covering OWASP Top 10 vulnerabilities, analyzing your code in real-time.

AST Analysis

GitHub Integration

10 Detectors

Real-time

Quick Start

1. Try the Playground

Paste your code in the Playground and run a scan to see vulnerabilities in real time.

2. Install the GitHub App

Install our GitHub App to automatically scan every pull request for security issues.

3. Review Results in Your Dashboard

Track scan history, manage repositories, and configure alerts from your dashboard.

Supported Detectors

Our engine runs 10 security detectors covering OWASP Top 10 vulnerabilities:

SQL InjectionCritical
Cross-Site Scripting (XSS)Critical
Secret LeakCritical
Path TraversalHigh
Command InjectionCritical
Weak CryptographyHigh
Auth BypassHigh
Race ConditionMedium
Vulnerable DependenciesMedium
Prototype PollutionMedium

Next Steps