Security Review — AI Code agent for GitHub PRs | IonWarp
Skip to content
IonWarpRouter
AgentsPricingBenchmarksDocsBlog
Try for free
Home/Agents/Security Review
Open Model Review

Add Security Review_Security Review
to every pull request.

Route pull requests to open source models for a multi-dimensional review.

79% faster · ↓99% in PR review cost*
Try for free Explore the models

Pull request review preview

IonWarpbotcommented 15 min ago

IonWarp Review — PR #87

3 issues| 2 P0 1 P1
#SevIssueFile
1Request ID lets a member read another workspaceapi/projects/[id].ts
2Provider secret included in the public client bundleapp/config.ts
3Unsigned webhook can enqueue account actionsapi/webhooks.ts
api/projects/[id].ts
42434445
−+++
const project = await projects.get(params.id);const project = await projects.getForMember({  projectId: params.id, userId: session.user.id,});

A signed-in user can cross the workspace boundary · Security Review

The endpoint authenticates the caller but never binds the requested project to their membership. Changing the URL ID returns another workspace’s private project. Resolve membership before returning it.

Suggested fixAI fix prompt

Security Review benchmarks.

IonWarp models and review apps on the same open-source pull requests.

Pull Request Routing
ionwarp:security-review:pro

Loading the published benchmark…

Agents
Pricing

Best pricing in the game.

One workspace price with seats included. Credits pool across your team. Unlimited repos on every plan.

Starter

$0 /mo

Try AI PR review.

  • Starter Swarm across 2 models
    • Code Review
    • Security Review
  • 3 seats included
  • +5,000 credits/mo
  • Unlimited repos
Get Started

Pro

Most popular
$49 /mo

Get AI PR review right from day 1.

  • Pro Swarm across 3 models
    • Docs Freshness
    • AI Architecture
    • Log & Errors
  • 5 seats included
  • +15,000 credits/mo
  • +$29/mo per added seat
  • Unlimited repos
Choose Pro

Max

$149 /mo

Scale AI PR review.

  • Max Swarm across 5 models
    • UX Review
    • API Performance
    • Analytics Review
    • SEO Review
    • Changelog
    • CI/CD Performance
    • Plan Review
    • Repeat-Failure Learnings
    • SOC 2 Review
  • 10 seats included
  • +50,000 credits/mo
  • +$29/mo per added seat
  • Unlimited repos
  • Priority support
Choose Max
Enterprise

Custom swarms + credits · GitHub Enterprise · SSO/SAML + audit logs · Custom security review + SLA

Contact us
IonWarp for Startups

Get the Max plan at half price. — Full Swarm. Proactive PRs. 10 seats and 50,000 credits a month included.

Apply
How Security Review works

Details

Runs on every pull request, on GitHub

◆Agent Prompt

Reviews GitHub PRs for security vulnerabilities, unsafe auth patterns, trust boundary issues, exposed secrets, newly-exposed attack surface, and attacker-mindset exploit chains. The ONE security lens (absorbed the former security-surface and pen-test reviewers, 2026-07-22). Use when a pull request needs a PR-scoped security review rather than a full-repository audit.

Ask for it
  • Review PR {number} for security
Runs on
Every pull request, on GitHub
Category
Code
Capabilities
Suggests fixes
Model
GLM 5.3 Flash
Reviewer config
Name:    Security Review
Skill:   security-review
Code:    SR
More agents
Code ReviewAPI PerformanceCI/CD PerformanceLog & ErrorsAll agents

Great code.
Intelligently routed.

Try for free
IonWarp
All agentsDocsContactSecurityPrivacyTerms