Find the exact paths
Move from aggregate warnings to affected files and a clear priority order.
GitHub exposure preview complete
Your public check completed the baseline.
That is a useful first signal, not a complete security review. A license adds deeper evidence, preventive assets, and the official verification workflow.
Your private preview summary
0
Signals
0
Critical
0
High
0
Risk areas
Open result
Review incomplete
No repository name, source code, matched value, or customer identity was sent to this page.
The missing answer
A signal matters only when you know where it is and what to protect next.
Map agent access
See what AI tools may read, change, execute, or transfer through AccessGraph.
Create defensible proof
Complete licensed review for a signed Guardprint and public verification record.
Choose your licensed scope
Unlock what the preview cannot show.
One-time fee. One year of product updates.
Recommended from this preview
1 authorized repository
Starter
Planned regular €199Save €50
€149
Exact findings, Risk Score, AccessGraph snapshot, PDF report, and local guardrail installer.
Get Starter5 authorized repository scans
5 authorized repository scans
Pro
Planned regular €699Save €200
€499
Full reporting, AccessGraph history, policy generation, checklist, and verification workflow.
Get Pro25 client repository scans
25 client repository scans
Agency
Planned regular €2,799Save €800
€1,999
Client portfolio, reports, signed records, exports, partner tools, and priority support.
Get AgencyPreview versus licensed CapitalGuard.
CapabilityGitHub previewCapitalGuard license
Aggregate exposure countsIncludedIncluded
Exact affected filesHiddenIncluded
Priority order and next precautionsHiddenIncluded
AccessGraph and prevention assetsNot includedIncluded by plan
Architecture-aware regressionsNot includedProtected local customer kit
Signed Guardprint and public verificationNot includedAfter approved review
Do not stop at “exposure detected.”
Find the paths, install the precautions, and create the proof.
Closed-loop GitHub workflow
A finding becomes a check that stays.
The licensed customer kit retains exposed control categories as deterministic regressions. Pull requests, manual runs, and schedules can re-run the redacted scanner and fail while an exposed path remains.
Challenge
Select control tests from the observed repository architecture.
Explain
Record the crossed boundary, downstream assets, and required control.
Re-test
Retain exposed categories and bind the changed state to a new Guardprint.