Product Roadmap

Where ShipShield Is Headed

See what we've shipped, what we're building now, and what's next. No fake “Available” badges.

Shipped

Shipped

Full Codebase Audit

8+ security tools, AI analysis, PDF report. $25 one-time.

Shipped

Free Website Scanner

Security headers, SSL, cookies, exposed files. No signup.

Shipped

AI Analysis

Two-pass LLM review with GPT-5.2 and Claude Sonnet 4.

Shipped

Professional PDF Report

Detailed findings, severity ratings, AI fix suggestions.

In Development

In Development

Subscription Plans

Recurring scans: weekly or every 6 hours. Starter, Pro, and Enterprise tiers. Incremental diff-only scans to stay fast.

In Development

GitHub App (PR Scanning)

Scan every pull request automatically. Results as GitHub Check Runs and inline review comments. Block merges that introduce vulnerabilities.

Preview: How PR Scanning Will Work

Add ShipShield to your GitHub Actions workflow with a few lines of YAML. Coming to GitHub Marketplace.

.github/workflows/security.ymlPreview
name: Security Scan
on: [push, pull_request]

jobs:
  shipshield:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Run ShipShield Scan
        uses: shipshield/action@v1
        with:
          api-key: ${{ secrets.SHIPSHIELD_API_KEY }}
          fail-on: critical

Planned

Planned

MCP Fix Server

AI agents in Cursor, Windsurf, and Claude Code pull findings and apply fixes directly in your IDE.

Planned

GitLab and Bitbucket

Full platform support beyond GitHub. Same scanning, same reports.

Planned

Slack and Webhooks

Real-time alerts when scans complete or critical findings appear.

Planned

Dynamic Scanning (DAST)

Authenticated crawling with ZAP/Nuclei for runtime XSS, SQLi, and SSRF detection.

Planned

Team Dashboards

Aggregate risk scores across all repos. Invite team members with role-based access.

Planned

Public Security Badge

'Scanned by ShipShield' badge for your README with live risk score.

Ship With Confidence

Get a professional security audit for your codebase in minutes.

Start Your Security Audit