CI Agent

The scan runs on your side. The deliverable comes from Hykaro.

The CI Agent installs into your pipeline, GitHub Actions first. It scans what you've pre-configured, then sends findings to Hykaro. Your code never leaves your infrastructure.

Three things this changes

• Unlimited scans. The compute is yours. Iterate ten times a day if you want: no per-scan cost, no artificial cap.
• Your code stays with you. No cloning on Hykaro's side. Smaller liability surface, a lighter DPA, an easier sale.
• Continuous proof. The agent runs on every pipeline push → a run history you can use as evidence of continuous vulnerability management (SOC2 Type II / ISO A.8.8 logic).

We gate the deliverable, not the scan

The principle is simple: you can't throttle a scan running on the client's infrastructure, so we don't try. The agent scans without limits. It's report generation, history, and AI triage that are validated server-side against your entitlement.

Two ways to configure

1. A versioned cookbook.yml checked into your repo.
2. Project config pulled from the SaaS via your API key.

See per-project pricing →