Support

Write to info@visionedge.sk. We answer on working days, usually within one business day. For a security issue in AIScan itself, put "Security" in the subject.

Frequently asked questions

Do you keep my code?

No. Uploaded files and repositories are deleted as soon as the scan ends. The report keeps file paths and short excerpts with secrets redacted, and it is deleted after 14 days or when you press Delete report.

Why does a deep website scan need domain verification?

Deep checks request files that are not linked from your site and test your database rules. Only the owner may allow that. Add the meta tag, file or DNS record shown on the verification page.

How does live monitoring work?

After a code scan, press Watch live. We keep the package list (not the code) and check it every hour against OSV, GitHub advisories, CISA and EPSS. New issues appear on the project page and can be sent to Slack, Discord or a webhook.

How do I use AIScan in ChatGPT or Codex?

Install the AIScan plugin from the plugin directory, then ask for example: "Is the npm package react-codeshift safe to install?", "Check this package.json" or "Scan https://github.com/owner/repo".

How do I use it in CI or a local agent?

Install the command line tool and run aiscan scan . --format sarif --output aiscan.sarif in your pipeline. Local agents (Codex, Claude Desktop, Cursor, VS Code) can start the MCP server with aiscan mcp.

A finding is wrong. What now?

Send us the rule id (for example AIS-AI-004) and a short description. We use these reports to reduce false alarms.