VulnaAI, the Russian-language code security checkpoint

Field notes

The service accepts several project shapes: selected GitHub repositories, public repository URLs, ZIP archives, deployed websites, and an MCP connection for Cursor or Claude Code. Its stated website checks range from HTTPS and response headers to bundled secrets, CORS, GraphQL, and exposed files. Active probing is gated by an ownership declaration, while the full findings report and repair instructions sit behind a sign-in and paid-project flow.