The findings are free. Pay when you need it issued.
Scanning is free and unlimited on your own machine — the engine is open source. What you pay for is a report we issue and date, so a customer, investor, or reviewer can rely on it instead of taking your word for it.
Start here
Free Security ScoreFree
Best forFinding and fixing your own issues.
Every finding with its file, evidence, and fix — the same output the open-source CLI gives you. Unlimited if you run it locally; 2 hosted scans per verified account.
→ Unlimited local scans (CLI, Docker, GitHub Action)
→ Every finding with file path, evidence, and fix guidance
→ Score, risk level, and breakdown by area
→ Printable report, marked as self-reported
Good to knowYour own scan of your own code, so the report carries your word rather than ours. No issued document, no history, no monitoring. Run the CLI, Docker image, or GitHub Action and nothing leaves your machine. Or upload here and the result appears in My Page when processing completes.
Best forWhen someone else has to accept the result — a customer, an investor, a reviewer.
The same findings, issued as a report by us: generated and dated at a fixed version of your source, with a shareable page you can hand to a third party.
→ Report issued and dated by Oh My Audit, not self-reported
→ Shareable verified page you can hand to a third party
→ Printable report with executive summary and action plan
→ Score adjusted for scanner noise before it is published
→ One automated re-scan within 30 days to show what you fixed
→ Everything in Free — all findings, files, evidence, and fixes
Good to knowAutomated analysis can include false positives. An issued report records what the scanner found at a point in time; it is not a certification or a guarantee. Buy once, upload a zip, and the issued report is generated and delivered instantly in the app. Fully automated — no human involvement, no waiting.
Not sure yet?
Start with the free score. It is enough to see whether the project looks clean or needs a closer pass.
Need every finding?
Get the issued report when you need every detected issue with its location and fix guidance, generated instantly.
Scores and reports are decision aids, not certification. Automated analysis can include false positives. The issued report flags risk areas to review, not exhaustive audit coverage. See refund rules before purchase.