V12
An autonomous security agent that audits your code, proves its findings with executable exploits, and patches what it finds.
V12 is an autonomous security agent that audits your code, generates executable proof-of-concept exploits, and patches what it finds—so you ship with fewer vulnerabilities and fewer false positives.
Already signed up? Get started now:
Your first audit
Connect GitHub or upload an archive, scope the run, and launch an audit.
Reading findings
The findings list, proof-of-concept output, remediation, and review controls.
Severity and validity
Triage findings so real issues get attention and false positives stay out of the way.
Autopilot
Automatic reviews for every push or pull request on your repositories.
Organizations
Workspaces, members, billing, memory, and data privacy.
Public API
Run audits from your own tools over REST or the MCP server.
What V12 excels at
- Full repository audits. Scan any branch, tag, or commit. Choose which directories to include or exclude—skip vendor and interface code you don’t own. You’re billed on the estimated cost shown before each run.
- Pull request review. V12 scans only the files changed in a PR, keeping results focused. Supports commit ranges, patch file uploads, and automatic triggering whenever a PR opens.
- Exploit-verified findings. For every potential vulnerability, V12 generates a proof-of-concept test and executes it in a live environment. If an exploit can’t be made to pass, the finding is invalidated before it reaches you.
- Automated patching. V12 generates a recommended fix for each confirmed finding, then re-runs the original exploit against the patched code. If the exploit no longer passes, the patch is marked verified.
Getting the best results
- Scope your scans carefully—exclude vendor and interface code to reduce noise and cost.
- Use diff review for day-to-day development and full audits before major releases.
- Triage findings as
valid,invalid, oracknowledgedto help V12 learn your preferences over time. - Trigger V12 manually from a pull-request comment by mentioning
@v12sec. Text after the mention is included in the run context, so you can add instructions for the audit.
Getting access
Sign in at V12 with Google OAuth, then connect your GitHub account to authorize repo access. This lets V12 list your repositories and read their contents for manual audits.
Coming soon
V12 is actively shipping the following based on user feedback:
- Context enrichment—V12 will learn from your valid/invalid decisions over time and surface findings that match what you actually care about.
- Agent and CI/CD API—run V12 programmatically without GitHub, as part of your existing pipeline.
- GitLab and Gitea support—connect repos hosted outside GitHub via the V12 API.
Feedback
Questions or feedback? Reach out at hello@v12.sh or use the feedback button in the app.