Hyrax
ExploreConnectSet upGo
What happens next

Four steps to your
first fixed bug.

1
Create your account
GitHub, Google, or email. No password to set.
2
Pick a sample repo and audit it
See the scan, the score, and the report. No connection needed.
3
Fix a finding
Hyrax writes it, runs your tests, opens the PR. You merge.
4
Connect your repo
Run the same loop on your own code when you are ready.

Create your account

Connect your code host and Hyrax runs your first audit for free.

By continuing you accept the Terms of Use and Privacy Policy.

Welcome to Hyrax

Start on a sample repo.

Everyone starts here. Run a real audit on a sample repository and fix something, with no connection to your own code yet. You connect GitHub later, when you want Hyrax on your own repo.

No GitHub connection needed yet.
You're in

What do you want to do first?

No connection needed to start. Take a quick tour on a sample repo, or connect your own code now and run Hyrax for real. Either way, the checklist tracks where you are.

Take the tour →Run an audit on a sample repo, see real findings, watch a fix. No GitHub needed.
Connect your code →Install the Hyrax app and run your first real audit on your own repo.
Tristan-Benozer TEAM ·
$1 of $230 this month (estimated)
T
REPOSITORIES › HYDRA_DRAFT@MAIN › FINDINGS

Hydra_DRAFT

SAASCONSUMER
31k lines · TypeScript 100% · Other 0.3%
Choose a repository
Pick one to audit
Sample repositories

Real sample repos Hyrax can audit with no connection. Select one to run your first audit. This is the same picker you use on your own repos later.

Hydra_DRAFTNext.js · TypeScript · 31k lines · SaaS
payments-serviceGo · 12k lines · billing API
mobile-webReact · TypeScript · 24k lines · consumer app
Loop closed

You just ran the whole loop.

Scan, fix, ship, close, on a sample repo with no connection. Run it again, or point Hyrax at your own code.

Connect your code

Install the Hyrax app

You're signed in. This is a separate step that gives Hyrax access to the repositories you pick. An owner or admin of the org approves it. Read-only, and nothing outside the repos you choose.

You pick the repositories. Not an owner or admin? Invite them →
Workspace

Almost ready. Activate your workspace.

Your workspace holds your repositories, audits, and billing in one place.

Shown to the workspace owner only.
Security

Set up a passkey

Sign in with Face ID, Touch ID, or your device. No password to leak.

Security

Save your recovery codes

Use one if you lose your passkey.

4F2A · 9KD17QP3 · 2MX8BE6R · 1TZ05HN4 · 8WC2
Step 1 of 2 · Pick a repository

Choose your first repository

Free covers 1 repository and 1 audit a month, up to 5 findings and 5 fixes. Multiple repositories and ad-hoc audits come with Pro.

payments-serviceTypeScript · private
web-appTypeScript · private
infraGo · private
Step 2 of 2 · About you

Last step. Tell us a bit about you.

Your first audit is already running. This just sets up your account.

All fields required to finish setup.
All set

You shipped your first fix.

It's merged. From here Hyrax audits every push and submits fixes as pull requests. You review and merge. Nothing merges without you.

Audit, fix, and merge, done
Your first finding is fixed and merged.
Hyrax now runs on every PR
It reviews new pull requests and keeps the repo clean.
Fixing
Click the highlighted area to continue