Pricing

Early access

Free

Free during early access. We'll email you before paid plans start.

Up to 20 projects.

Everything is included:

  • The 48-item security checklist, matched to your stack
  • Guides on auth, payments, uploads and 20 more topics
  • Checks for packages, leaked secrets, risky config and debug routes
  • Optional local tests: access, Supabase RLS, Firestore rules, webhooks
  • Email alerts when a new advisory matches a package version you use
  • Local reports in HTML, JSON and SARIF
  • Signed pack updates with new advisories and guides
Get Kekkai

Questions

Which coding agents and systems does it work with?
Kekkai works with Claude Code, Codex, OpenCode and Cursor. It runs on macOS and Linux. Coming soon: Gemini CLI. Not yet supported: Antigravity.Kekkai's Codex and Cursor support was tested in their terminal versions.
Why not just ask my agent to check security?
You can, but if it wrote the code, it's grading its own work. Kekkai brings a checklist and guides for many stacks, runs checks a model can skim past (keys in your built bundle, tables without row-level security), and records what was and wasn't checked. A fix counts as verified only after Kekkai's own recheck or test passes.
Does Kekkai see my code?
No. Kekkai never sends your code to us. With alerts on, your project's package list is sent, encrypted. Turn alerts off and uploads stop. We delete your package list on our server once the request goes through. Deleted data can stay in our backups for up to 30 days. Your coding agent is a separate product with its own rules. See what goes where.
Does it run its own AI?
No. Kekkai never runs or pays for a model. Kekkai asks your agent to do the reading and fixing, and gives it the checklist, the guides and the checks, and keeps the record. Guard mode runs only Kekkai's automatic checks and uses no agent tokens.
Will it block my deploys or installs?
No. Kekkai informs and never blocks. It tells your agent and you what it found and what wasn't checked; what to do is your call.
Does a clean review mean my app has no vulnerabilities?
No tool can show that, and Kekkai never says it. A review lists what was checked, how strong each result is, and what was not checked, so you can see the gaps.
How much of my agent's time does Kekkai use?
  • Guard: Kekkai's automatic checks only, no agent tokens.
  • Standard (default): Kekkai asks your agent for a light review after each change and a full review before you deploy.
  • Thorough: everything in Standard, and Kekkai also asks for a review of the full checklist.
What counts as a project?
A project counts the first time you use Kekkai in it. The same repo on two of your computers counts once, and removing a project frees its place. Early access covers up to 20 projects.
Is Kekkai free?
Free during early access. We'll email you before paid plans start. Early access has every feature, for up to 20 projects.