Getting Started with Asenvra

Asenvra is a production-readiness scanner for AI-built apps. Upload your code, get a detailed security and quality report, fix issues, and ship with confidence. This guide will walk you through your first scan in under 5 minutes.

Quick Start

1. Create an account

Sign up at asenvra.dev/auth/signup. No credit card required — the Free plan gives you 3 scans per month.

2. Upload your code

From the dashboard, click LaunchGuard and either:

  • Drag and drop a ZIP file of your project
  • Paste a GitHub URL (public repos only)
  • Paste a GitHub URL with a commit SHA for specific versions

3. Review your results

Within 10-30 seconds, you'll see a detailed report with:

  • Hardcoded secrets and API keys
  • Mock/fake data that AI assistants left behind
  • Missing environment variables
  • Debug flags left enabled
  • CORS and auth misconfigurations
  • Missing deploy configuration files
  • Outdated dependencies with known CVEs

4. Fix and ship

Each finding includes the exact file path, line number, and a plain-English explanation. Elite plan users can auto-fix issues with one click — download a clean ZIP or open a GitHub PR with all fixes applied.

What Asenvra Checks

Asenvra runs 19 individual checks across 6 categories:

  • Security — Hardcoded secrets, exposed API keys, JWT tokens, password leaks
  • Mock Data — Placeholder names, fake emails, Lorem Ipsum, dummy images
  • Configuration — Missing env vars, debug mode, misconfigured CORS
  • Deployment — Missing Dockerfile, CI/CD configs, platform requirements
  • Dependencies — Outdated packages, abandoned repos, CVE vulnerabilities
  • AI Analysis — Semantic code review catching auth bypasses, race conditions, IDOR (Elite+ plans)

Understanding Your Score

Each scan produces a score from 0-100 and a letter grade:

  • A (90-100) — Production-ready. Ship with confidence.
  • B (75-89) — Minor issues. Fix before launch.
  • C (55-74) — Several medium issues. Do not deploy without fixing.
  • D (35-54) — Critical issues present. Do not ship.
  • F (0-34) — Active security threats. Fix immediately.