Create your Rafter account and link your GitHub to access your repositories.
Sign in with GitHub or Google from the top-right corner
If using GitHub, grant access to the repos you want to scan
You can manage which repos Rafter can see at any time from the dashboard
Don't see a repo? Use "Manage Access" in the repository dropdown to update permissions
Pick a repository and branch, choose your scan mode, and hit Start Scan. Results arrive in seconds.
Select a repository from the dropdown
Choose the branch you want to scan
Fast scan: rapid static analysis covering common patterns
Plus scan: everything in Fast plus AI agent deep dives into complex security patterns
Hit "Start Scan" and watch the progress in real time
Your scan report breaks down every finding by severity — Critical, Warning, and Note — with clear explanations and exact file locations.
Click on any completed scan to view its full report
Findings are grouped by severity: Critical (red), Warning (orange), Note (blue)
Each finding shows the exact file, line number, and a description of the issue
Expand a finding to see the vulnerable code snippet and why it matters
For a deeper dive into how to read results, see the Handbook
Rafter findings include built-in context for coding agents. Just paste the finding — the prompt is already there.
Each finding has a copy button that includes the full context an agent needs
Paste into any coding agent and it understands the vulnerability, location, and fix
Re-scan after fixes to verify they're resolved
Set up continuous scanning so every push gets checked automatically.
Generate an API key from Settings → API Keys
Add the Rafter CLI to your GitHub Actions, GitLab CI, or any pipeline — CI/CD setup guide ↗
Scans run automatically on every push or pull request
Block merges when critical vulnerabilities are detected
Your agents can trigger scans programmatically via the API
Rafter findings are designed to drop straight into your coding workflow. Every finding includes the context an AI agent needs to understand and fix the issue.