Integrations

Pick the path that fits where your team already lives. They're ordered roughly by effort — start at the top, work down as you need more automation.

30 seconds — paste a URL.

For: Anyone who wants a one-off security report on a public URL.

1 minute — copy/paste one line of markdown.

For: OSS maintainers and indie devs who want a Shields-style trust signal in their README.

Click 'Enable monitoring' on a verified domain.

For: Pro users running production sites who want to wake up to regressions, not 4am pages.

2 minutes — paste an incoming webhook URL.

For: Teams that triage in chat, not email.

One-click install from the Vercel marketplace.

For: Vercel-hosted apps that want every preview deploy automatically scanned.

Install the App → authorize repos → done.

For: Teams that want PR-blocking Check Runs and inline annotations on every change.

Generate an API key, POST a URL, register a webhook.

For: Anyone building a custom workflow, custom dashboard, or wiring scans into another tool.