Observed arrival · 2026-11-05
Alethix tests which security findings are real
Alethix checks scanner and AI code-review findings against a disposable copy of an application, then reports which issues it could reproduce.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- Teams triaging application security findings
- Worth noticing
- The example labels findings as exploitable, reachable, hardening, or not an issue, then shows two fixes rechecked with a 403 response.
Field notes
The documented test uses two users and a canary string: a request made as one user is checked for access to the other user's seeded data. The sample input is an eight-finding review of Ledger, a demo invoicing API with two planted access-control bugs. Its displayed output separates exploitable findings from reachable-but-unproven issues, hardening advice, and a false alarm; the two shown patches are checked again and return 403.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
⊠LoginAccess appeared gated
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
One card from the complete issue