Trust FAQs

Question 1

What is Trust and how does it secure my projects?

Accepted Answer

Trust is an AI-native security scanner designed to detect vulnerabilities in both live websites (DAST) and GitHub repositories (SAST, Secrets, SCA). It provides AI-generated fix code with diffs and enables one-click pull request creation for rapid remediation.

Question 2

What types of vulnerabilities can Trust identify?

Accepted Answer

Trust performs DAST scans for URLs covering HTTP headers, SSL, CORS, and more. For GitHub repositories, it offers SAST for code-level issues, Secrets detection for exposed API keys, and SCA for dependency CVEs via npm audit.

Question 3

How does Trust help fix detected vulnerabilities?

Accepted Answer

Trust leverages AI for root cause analysis, generating precise fix code with before/after diffs. For GitHub users, it can automatically create a new branch, apply the fix, and open a pull request with a single click.

Question 4

Can Trust integrate into my existing development workflow?

Accepted Answer

Absolutely. Trust offers automated CI/CD security checks via a GitHub Action, scheduled scans with alerts, and real-time in-IDE security feedback through its MCP Server for clients like Claude Code and Cursor.

Question 5

What are the main differences between Trust's Free and Pro plans?

Accepted Answer

The Free plan provides limited URL and repository scans. The Pro plan unlocks unlimited scans, full AI analysis, Auto-Fix PRs, scheduled scans, PDF/CSV export, and comprehensive security management features.

Trust

Trust

Key Features

Use Cases

Key Features

Use Cases