Security
Expose secrets committed to the repo, injection surfaces, and auth or config left wide open.
gitleaks · semgrep · 10-level dev sec review — scanners used for Security
One Audit. Dozens of Scans.
Ready-to-Use Repair Prompts.
ShipDoctor runs scans against 8 categories of your codebase, uncovering hundreds of results — usually inside 5 minutes. Findings are ranked and presented in a single report, each one with the evidence behind it, an effort estimate, and a repair prompt you can hand straight to your coding agent.
It is the most comprehensive audit of your codebase available; created by senior engineers who have evaluated thousands of projects.
Audit Categories
Each category is a set of purpose-built scanners plus a reasoning pass over what they found.
Dependencies
Discover packages with known vulnerabilities, and the abandoned ones nobody has bumped in years.
osv-scanner — scanners used for Dependencies
Performance
Reduce bundle weight, render cost, and the Core Web Vitals a real user on a real phone feels.
lighthouse CI — scanners used for Performance
Code Quality
Uncover lint violations, duplicated blocks, and the complexity that will make the next change expensive.
eslint · jscpd — scanners used for Code Quality
Accessibility
Verify recommended accessibility settings such as contrast, semantics and focus order — the failures that lock people out of your product.
axe-core · semantic-sanitizer — scanners used for Accessibility
AI Slop
Squash the slop. Remove hallucinated APIs, copy-pasted boilerplate, and comments describing code tsat was never written.
slop-sterilizer — scanners used for AI Slop
Unnecessary Code
Clean up tech debt, dead exports, unused dependencies, and whole files that nothing in the app imports.
knip · dead-code-killer — scanners used for Unnecessary Code
Missed Opportunities
Proactive suggestions for your code such as framework features you already pay for and never switched on, and the wheels you reinvented.
agentic suggested opportunities — scanners used for Missed Opportunities
What every finding carries
The Evidence
The file and line, which scanner flagged it, and what it saw — so you can verify the call rather than take our word for it.
The Effort Estimate
An hour range for the fix, rolled up per category and across the whole repo, so you can plan the work before you start it. Need more help? We can fix it for you.
The Repair Prompt
A written instruction scoped to that one finding, ready to paste into Claude, Codex, Cursor or the coding agent you already use.
Pricing
One price, one audit, no subscription. Scan for Free and DIY. Or reach out to us for help.
$149per audit, one time
- Every finding, with the evidence behind it
- A repair prompt per finding, ready to paste into your coding agent
- Effort estimates in hours
- Downloads: the client report, the findings dataset and the repair-prompt work plan
Test is Free: Scan your Code, Read the Grade, then Decide.
All 8 category scores and your worst findings are revealed — drop an email for a few prompts. Everything is secure and ephemeral. Your data is anonymized and deleted 15 days after the audit runs.
What You Don't Know Will Hurt You.
Scan For Free, then unlock your report if you want to dive deeper.
No account needed.
- Ephemeral — Deleted After 15 days
- Results in Under 5 Minutes
- Secure — Your Code Stays Anonymous