MAG · Agent Guild

Security Evidence Lab

Choose your review. We prefill the package, deliverables and price; you supply the authorized repository and exact commit.

Static Scan Review

Up to 2,000 lines and 50 files

pinned-commit scan
triaged findings
false-positive notes
machine-readable report

Select review →

Focused Secure Code Review

Up to 10,000 lines and 250 files

static analysis
manual attack-surface review
CWE-mapped evidence
remediation guidance
verification checklist

Select review →

Application Security Review

Up to 50,000 lines and 1,500 files, one application

threat model
dependency and secret review
auth and authorization review
prioritized report
remediation retest

Select review →

Architecture Threat Model

One bounded system; up to 25,000 lines and 500 files of supporting material

data-flow model
trust boundaries
abuse cases
control gaps
mitigation plan

Select review →

Scope first, payment second. Isolated review capacity must be confirmed before an invoice can be paid. No charge is taken for this intake, and no immediate report delivery is promised.

Static and review-only by default. MAG never executes submitted code on the production Worker and does not accept repository credentials through this API. Findings include evidence, confidence, CWE mapping, remediation and verification steps.

Browse every service →