# FYEO Security Scanner — Full Product and Integration Guide Source: https://fyeo.io/scanner FYEO Security Scanner # AI security scanning for smart contracts, trained on 300+ real audits. Built on FYEO's own security reasoning model. It reasons through smart contracts, APIs, integrations and dependencies like a senior auditor, helping catch flaws unique to your code—not just patterns from known bugs. Run PR, third-party dependency and full audits. [Start free — 50 credits, no card required](https://scanner.fyeo.io/login)[View pricing](#pricing) Your code is never stored after a scan. scanner.fyeo.io A finding, end to end ## What a finding looks like. Every result is structured for a security review: evidence, exploitability, remediation, and an auditable verdict in one place. 1. 1Ranked by severity, mapped to CWE 2. 2Exact file and line, vulnerable code highlighted 3. 3Plain-language exploit path and fix 4. 4Confirmed by a FYEO auditor when it matters How it works ## From repository to reviewed finding. 1. 01 ### Connect a repo Choose exactly which repository FYEO can access through GitHub. 2. 02 ### Scan Run a full or diff audit in the background while your team keeps working. 3. 03 ### Triage Review severity-ranked findings and escalate anything ambiguous to a human auditor. Purpose-built and private ## AI grounded in how auditors work. The Scanner combines specialist models, FYEO audit experience, and strict source-code handling in one review workflow. ### Built from real audit work Proprietary models trained on 300+ audits, with a reinforcement-learning feedback loop from FYEO security engineers. ### Fine-tuned for vulnerability classes Purpose-built models run 10–20× faster than untrained cloud-based alternatives, with no per-token cost ceiling. ### Self-hosted inference Your code runs on FYEO infrastructure. ### Least-privilege repository access Grant access per repository. Source is processed for the scan and never stored afterward. Flexible credit pricing ## Pay for the scanning you need. Start with 50 free credits. Pick a monthly plan, or buy credits as you go — no plan required. Exact price shown before every scan Failed scans refunded automatically Start free ### Free $0 50 credits at signup, valid 30 days A full audit of a small project plus a couple of PR reviews — no card required. - 50 credits at signupValid 30 days - No credit card required - Unlimited repositories - 1 seat (owner) [Start free](https://scanner.fyeo.io/login) 50 signup credits are valid for 30 days. New ### Dev $59/mo 40 credits / month For a solo dev keeping one small project continuously covered. - 40 credits / monthCredits pay for scans — no repo limits - Unlimited repositories - 1 seat (owner) - Findings history & trends - Standard support [Choose Dev](https://scanner.fyeo.io/login) Auto-renews monthly at $59/month until you cancel. Cancel anytime in Billing. [Terms](/terms-and-conditions). ### Starter $99/mo 80 credits / month One actively developed project. - 80 credits / monthCredits pay for scans — no repo limits - Continuous scanning on every PR - Unlimited repositories - 1 seat (owner) - Findings history & trends - Standard support [Choose Starter](https://scanner.fyeo.io/login) Auto-renews monthly at $99/month until you cancel. Cancel anytime in Billing. [Terms](/terms-and-conditions). Most Popular ### Growth $300/mo 280 credits / month A team shipping across several repos. - Everything in Starter, plus - 280 credits / monthScan every project your team ships - Team seatsUp to 5 team seats - Findings history & trends across repos - Standard support [Choose Growth](https://scanner.fyeo.io/login) Auto-renews monthly at $300/month until you cancel. Cancel anytime in Billing. [Terms](/terms-and-conditions). ### Pro $1,500/mo 1,600 credits / month Heavy continuous scanning plus human auditor hours. - Everything in Growth, plus - 1,600 credits / monthContinuous coverage at scale - Human expert audit includedReal auditors review your code, not just AI - Up to 10 team seats - 4 Senior Auditor hours / mo - Fix verification by auditors - Priority scanning queue - Priority support [Choose Pro](https://scanner.fyeo.io/login) Auto-renews monthly at $1,500/month until you cancel. Cancel anytime in Billing. [Terms](/terms-and-conditions). Pay as you go ### Top-up credits, no subscription Buy a one-time credit pack whenever you need one. 40 credits$59 160 credits$199 800 credits$899 ### Enterprise For larger orgs and regulated environments. - Everything in Pro, plus - Unlimited team seats - SLA + escalation paths - Custom credit allotment - Multiple protocols / orgs - Dedicated security contact [Contact sales](/contact) ## Security Scanner FAQ How do I check if my vibe-coded app or smart contract is secure? Connect your GitHub repository to FYEO Security Scanner and run a full audit, then review the severity-ranked findings and fixes. Use PR audits for each change and dependency audits for third-party libraries. Automated scanning helps find vulnerabilities; it is not a guarantee of security, and high-stakes releases benefit from human review. Is there an AI security scanner that works with Claude or ChatGPT? Yes. FYEO Security Scanner connects to Claude, ChatGPT and other MCP clients through its MCP server. Connect your FYEO account to read scan results and request estimates. Queueing scans is off by default: enable AI apps access in your account and approve the quoted price before a scan is queued. See fyeo.io/mcp for setup. How much does a security scan cost? New FYEO Security Scanner accounts get 50 free credits, no card required. Scan costs depend on the scan type and repository size. You see the exact credit price before every scan, and failed scans are refunded automatically. Monthly plans start at $59; one-time top-up packs are also available. See fyeo.io/pricing for the current plans. How is FYEO different from using a general coding model to find bugs? FYEO is built on its own security reasoning model. It reasons through code like a senior auditor rather than relying only on patterns from known bugs, helping identify flaws unique to your code. Its review workflow produces severity-ranked findings with evidence, exploit paths and remediation for smart contracts, APIs, integrations and dependencies. [Use the FYEO Security Scanner with your AI →](/vibe-coding)[Connect Claude or ChatGPT →](/mcp)[Embed scanning with the Partner API →](/partners) ## Scan your first repo free. Sign in with GitHub and get expert-grade findings in minutes. [Start free — 50 credits, no card required](https://scanner.fyeo.io/login) --- Source: https://fyeo.io/pricing Pricing # A full AI security audit for about the price of lunch — not a $5,000 engagement. Manual audits run $5k–$100k and take weeks. FYEO's hybrid AI + human-led pipeline starts at a few dozen credits and finishes in minutes. [Start free — 50 credits, no card required](https://scanner.fyeo.io/login) ## Free A full audit of a small project plus a couple of PR reviews — no card required. $0 50 credits at signup, valid 30 days - 50 credits at signupValid 30 days - No credit card required - Unlimited repositories - 1 seat (owner) [Start free — 50 credits, no card required](https://scanner.fyeo.io/login) 50 signup credits are valid for 30 days. New ## Dev For a solo dev keeping one small project continuously covered. $59/mo 40 credits / month - 40 credits / monthCredits pay for scans — no repo limits - Unlimited repositories - 1 seat (owner) - Findings history & trends - Standard support Auto-renews monthly at $59/month until you cancel. Cancel anytime in Billing. [Terms](/terms-and-conditions). [Choose Dev](https://scanner.fyeo.io/login) Credits roll over for 3 months; balance cap 3x monthly credits. Cap on Dev: 120 credits. ## Starter One actively developed project. $99/mo 80 credits / month - 80 credits / monthCredits pay for scans — no repo limits - Continuous scanning on every PR - Unlimited repositories - 1 seat (owner) - Findings history & trends - Standard support Auto-renews monthly at $99/month until you cancel. Cancel anytime in Billing. [Terms](/terms-and-conditions). [Choose Starter](https://scanner.fyeo.io/login) Credits roll over for 3 months; balance cap 3x monthly credits. Cap on Starter: 240 credits. Most Popular ## Growth A team shipping across several repos. $300/mo 280 credits / month - Everything in Starter, plus - 280 credits / monthScan every project your team ships - Team seatsUp to 5 team seats - Findings history & trends across repos - Standard support Auto-renews monthly at $300/month until you cancel. Cancel anytime in Billing. [Terms](/terms-and-conditions). [Choose Growth](https://scanner.fyeo.io/login) Credits roll over for 3 months; balance cap 3x monthly credits. Cap on Growth: 840 credits. ## Pro Heavy continuous scanning plus human auditor hours. $1,500/mo 1,600 credits / month - Everything in Growth, plus - 1,600 credits / monthContinuous coverage at scale - Human expert audit includedReal auditors review your code, not just AI - Up to 10 team seats - 4 Senior Auditor hours / mo - Fix verification by auditors - Priority scanning queue - Priority support Auto-renews monthly at $1,500/month until you cancel. Cancel anytime in Billing. [Terms](/terms-and-conditions). [Choose Pro](https://scanner.fyeo.io/login) Credits roll over for 3 months; balance cap 3x monthly credits. Cap on Pro: 4,800 credits. ## Enterprise For larger orgs and regulated environments. Custom Custom credit allotment - Everything in Pro, plus - Unlimited team seats - SLA + escalation paths - Custom credit allotment - Multiple protocols / orgs - Dedicated security contact [Contact sales](/contact) 50 signup credits are valid for 30 days. Credits roll over for 3 months — a quiet month is never wasted Exact price shown before every scan — the number you see is the number you pay Failed scans are refunded automatically, in full No repository limits on any plan ### Top-up packs 40 credits $59 160 credits $199 800 credits $899 One-time credit packs with no subscription required — same 3-month rollover as plan credits. Rollover ## Nothing you pay for expires at the end of the month. Credits stay usable for 3 months after they're granted. A quiet month just means a bigger balance for the next release push. Month 1 Unused credits carry forward Month 2 Unused credits carry forward Month 3 Last month this batch can be spent Credit costs ## What a scan costs | Scan type | Cost | | --- | --- | | Full audit — small project≤5k lines | 35 credits | | Full audit — mid-size5–25k lines | 60 credits | | Full audit — large25–60k lines | 120 credits | | Full audit — very large60–125k lines | 195 credits | | Full audit — monorepo>125k lines | priced up front before you confirm — never blocked | | PR / pull-request reviewper pull request | a few credits — final pricing being calibrated | | Third-party dependency auditper dependency scan | a fraction of a full audit — final pricing being calibrated | ## You see the price before you scan. Failed scans are free. ### Exact price, up front Every scan shows its exact flat price before you confirm. No metered surprises after the fact. ### Errored scans auto-refund If a scan fails, the credits return to your balance automatically — no support ticket. ## Pricing FAQ ### What's a credit? A credit is a unit of scanning work. Bigger jobs cost more credits than smaller ones, and the exact price always shows before you confirm a scan. ### Do credits expire? Credits expire three months after they're granted (the free signup credits last 30 days). Your balance caps at three times your monthly amount. ### What happens if I cancel? You stop receiving new credits, but the ones you already have keep working until each batch reaches its normal expiry. ### What if a scan fails? You get an automatic full refund of the credits — no support ticket needed. ### Can I scan a huge monorepo on a small plan? Yes. You'll see the exact price up front and can add a top-up pack inline if you need more credits. Large scans are never gated to higher tiers. ### How is this different from just using Claude or ChatGPT? FYEO runs a purpose-built multi-stage audit pipeline — scoping, verification, false-positive filtering, and severity scoring — that finds issues general assistants miss. And every finding arrives as an auditable report. ## Scan your first repo today. [Start free — 50 credits, no card required](https://scanner.fyeo.io/login) --- Source: https://fyeo.io/mcp FYEO Security Scanner · MCP # FYEO MCP Server Bring security review into your conversations with Claude, ChatGPT and other MCP clients. Get scan estimates, follow progress and review findings without leaving your assistant. [Connect your FYEO account](https://scanner.fyeo.io/login) [Explore the Scanner](/scanner) ## Connect in three steps 1. 01 ### Add the connector In Claude, ChatGPT or another MCP client, add a custom connector using the URL below. Choose Streamable HTTP if your client asks for a transport. 2. 02 ### Connect your FYEO account Follow the browser sign-in and approval flow. Your assistant can request scan estimates and read your scan results. Use a public GitHub repository or one connected through the FYEO GitHub App. 3. 03 ### Choose whether to allow scans Queueing is off by default. As account owner, open API access → AI apps in your FYEO account to opt in. Ask for an estimate, review the exact quote, then approve before your assistant queues a scan. ### Connector URL `https://mcp.fyeo.io` Streamable HTTP · Browser sign-in and approval ## A quote before every scan Your assistant requests an estimate, tells you the price and queues the scan only after you agree. Quotes last 30 minutes; a queued scan never costs more than its quote. Failed scans are refunded automatically. [View credit pricing](/pricing) ## You control access AI apps cannot queue or cancel scans, or enable automatic PR scanning, until you opt in. Automatic PR scanning uses credits too—review and approve it before enabling. [Manage AI apps access](https://scanner.fyeo.io/account) --- Source: https://fyeo.io/partners FYEO Security Scanner · Partner API # Security built into the tools people already ship with. Built on FYEO's own security reasoning model. Plug it into your product so the apps, dApps and agents your users build get a real security check before they ship. [Request a test key](#test-key) [Book an intro call](/contact) ## Request a test key Free sandbox access. Same endpoints as live, sample findings, no credits spent. ## Vibe coding skips the security check. Your users are shipping AI-written apps, dApps and agents faster than ever, usually with no security review in the loop. In Web3 a missed bug isn't a patch, it's lost funds. $3.35B Stolen from Web3 in 2025 +37% Vs 2024 630+ Web3 hacks & exploits in 2025 The engine ## Reasoning, not recall. General-purpose models pattern-match against code they've seen. FYEO Security Scanner reasons through code the way a senior auditor does, so it catches flaws unique to your users' code, not just repeats of known bugs. Ranked by severity Critical to info, mapped to CWE, so they fix what matters first. Exact file and line The vulnerable code itself, not a vague warning about the repo. Exploit path and fix How an attacker would use it and what to change, in plain language. A triage verdict Each finding is confirmed or downgraded before it reaches your users. Rejected ones never do. ## Inside your product Your users run scans, review findings and work through fixes without leaving your app. You own the experience and the billing. 01 Estimate FYEO sizes the repository through GitHub without cloning it and returns the exact price. The estimate is what the scan charges. 02 Scan Submit with a read-only GitHub token. It's used only to clone that repository and is deleted when the scan finishes. 03 Results Signed callback or polling. Findings ranked by severity and mapped to CWE, plus an executive summary and threat model. 04 Bill your way Grant credits to each user's project after you take payment, priced however you like. Failed scans are refunded automatically. ## Scan types and credit prices PR audit The changes in a pull request 3 credits Third-party audit The project's dependencies 10 credits Full audit The whole repository, priced by size (up to 5K / 25K / 60K / 125K lines of code) 35 / 60 / 120 / 195 credits Free sandbox. Test keys hit the same endpoints and return sample findings and a sample report, so you can build the whole flow before spending a credit. > "Vibe coding shouldn't mean skipping security!" NoahAI (@TryNoahAI) on X, announcing the integration with free FYEO audit credits for the first 20 Noah-built projects. Noah lets anyone build dApps by chatting with AI. With FYEO Security Scanner integrated, Noah builders run security audits on what they've made, review the findings and fix them, all inside Noah. ## What a partnership looks like. 1. 01 Intro call We map where a scan fits in your users' flow and which integration suits your product. 2. 02 Build in the sandbox Free test keys, the same endpoints as live, sample findings. No credits spent. 3. 03 Go live We activate live access and your partner credits. Real scans, billed in credits. 4. 04 Launch together A joint announcement and a launch offer for your users. --- Source: https://fyeo.io/vibe-coding FYEO Security Scanner · For vibe coders # Vibe coding? Ask your AI if it's safe to ship. The FYEO Security Scanner connects to Claude, ChatGPT and other MCP apps so you can ask your AI to check your code for security vulnerabilities, explain the findings and walk you through fixes. Connect the FYEO Security Scanner to Claude, ChatGPT or any MCP app. Your AI pulls up real security findings on your code, explains them in plain language and walks you through the fixes, without leaving the chat. [Start free — 50 credits](https://scanner.fyeo.io) [Connect your AI](#connect) Sign in with GitHub. No card required. connected: fyeo Is this safe to ship? fyeo › get\_findings Your latest FYEO scan flagged a few things to fix first: - HIGHReentrancy in `Vault.withdraw()` - MEDUnchecked oracle price in `getPrice()` Want me to walk through the fixes, then queue a fresh scan? Example conversation. Findings shown are illustrative. How it works ## From a prompt to a security review. 1. 01 ### Sign in with GitHub Create your FYEO account at scanner.fyeo.io and choose which repositories FYEO can access. You get 50 free credits. [Explore the FYEO Security Scanner](/scanner) 2. 02 ### Connect your AI In Claude, ChatGPT or any MCP client, add a custom connector with the FYEO MCP server URL, then sign in with the same GitHub account. 3. 03 ### Ask “Is this safe to ship?”, “What did my last scan find?”, “Walk me through fixing the high-severity issues.” Your AI, connected ## Connect your AI Works with Claude, ChatGPT and any app that supports MCP. The fastest way to get started is to let your coding agent set it up. Copy this prompt into Claude Code, Cursor, Codex or any agent you use: I just signed up for FYEO's scanner and want you to use this tool to scan my code. Read https://scanner.fyeo.io/llms.txt and set up the MCP connection, ask me for whatever you need along the way. ### Or, you can connect manually: 1. 01 Add a custom connector (MCP server) with this URL in your AI app. `https://mcp.fyeo.io` 2. 02 Sign in with your FYEO account and approve access. 3. 03 To let your AI queue scans, turn on “Let connected AI apps queue and cancel scans” in your FYEO settings. Start the conversation ## What you can ask “Is this safe to ship?” “What did my latest scan find?” “Explain this finding like I'm not a security expert.” “Show me the exact line and how to fix it.” “Scan the changes in my latest pull request.” “How much would a full scan of this repo cost?” Your account. Your call. ## You stay in control - ### Read-only by default Connected AI apps can only read your scans and findings until you turn on scan queueing. - ### Price first, every time Before any scan runs you see the exact price in credits. It never costs more than that quote (valid 30 minutes). - ### Failed scans are refunded Automatically, in full. Why FYEO ## FYEO Security Scanner: reasoning, not recall General-purpose coding models flag vulnerabilities by pattern-matching against code they've seen in training. The FYEO Security Scanner is built on FYEO's own security reasoning model. It reasons through your code the way a senior security auditor does, so it can catch flaws unique to your code, not just repeats of known bugs. The details ## Vibe coding FAQ ### How do I check if my vibe-coded app is secure? Connect the FYEO Security Scanner to your AI app with its MCP server, then ask “Is this safe to ship?”. Your AI pulls up the findings from your latest scan, ranked by severity, with the exact file and line and how to fix each one. ### Do I need to be a security expert? No. Your AI explains each finding in plain language and walks you through the fix. ### Does it work with smart contracts? Yes, including smart contracts, APIs, integrations and dependencies. ### Which AI apps does it work with? Claude, ChatGPT and any app that supports MCP custom connectors. ### What does it cost? New accounts get 50 free credits. Every scan shows its exact price in credits before it runs. See /pricing. [View pricing](/pricing) ### Is my code stored? No. FYEO gets read access only to the repositories you choose through GitHub, and code is processed for the scan and never stored afterward. FYEO Security Scanner ## Ship fast. Ship safe. [Start free — 50 credits](https://scanner.fyeo.io)