Book a demo

Continuous Cyber Defense

When a new AI model is released, we run it against your applications before attackers do, and close what it finds within two days.

Book a demo

Vulnerabilities

One entry per issue per target. Each scan that finds it again adds to its history.

14 open31 closed
Unresolved 14Open 11In progress 3Closed 31Assigned to me
  Search vulnerabilitiesSeverityStatusDiscoveredAssetSeverity (high → low)
SeverityVulnerabilityTargetFirst seenStatus
In progress1
High8.2Viewer can change a project's billing planacme-billing.app2 days ago · seen 4 timesIn progressSK
Open5
Critical9.1Member can export another tenant's customersapi.acme-billing.app3 hours ago · seen 2 timesOpen
High8.1Guest can view another member's invoiceacme-billing.app1 hour agoOpen
High7.5Support role can read private notesacme-corp/helpdesk5 hours ago · seen 3 timesOpen
Medium6.4Invite link grants admin after expiryacme-billing.appyesterday · seen 2 timesOpen
Low3.1Deleted user keeps API accessapi.acme-billing.app2 days ago · seen 6 timesOpen

Source code optional.

Blackbox agents sign in as every role and test the running app. Whitebox agents read your code on every pull request.

One service that replaces DAST, SAST, SCA, SBOM, and the tests you run in-house or buy in.

Learn more ›

Scans

Blackbox scans test running apps. Whitebox scans read your code.

Schedule a scanNew scan
AllBlackboxWhitebox
  Search by target…Status
ScanStatusTriggerResultAgentsWhen
acme-billing.appRunningSchedule42%612 min ago
acme-corp/billing · PR #482RunningPull request70%23 min ago
api.acme-billing.appCompletedSchedule81 hour ago
acme-corp/web · PR #479CompletedPull request23 hours ago
staging.acme-billing.appCompletedManual5yesterday
acme-corp/helpdeskCompletedSchedule3yesterday

If Wakefield can't prove it, you never see it.

Agents replay each finding in a real browser and record it before you see it. Then Wakefield writes the fix, ready to open as a pull request, and retests it.

We have SLAs for zero false positives.

Learn more ›
Vulnerabilities / acme-billing.app

Guest can view another member's invoice

High8.1ExploitedNo login neededCross-account read
MOOpen Retest
OverviewTrafficScan traceFix

Impact

Any guest can open another member's invoice by changing its number. The page shows the member's name, amount and billing address.

CWE-639 · Seen 3 times, last 2 hours ago

How we reproduced it

PoC agent · Oct 20, 2026, 2:14 PM
acme-billing.app/invoices/INV-8812
Invoices
INV-8790Guest plan$120.00
You have 1 invoice.
Invoice INV-8812
Billed toMaya Ortiz (member)
Amount$12,480.00
Billing address41 Harbour St, Leeds
StatusPaid
This invoice belongs to a member. A guest should not see it.
▶0:140:16
0:00Looked at the sign-in page
0:03Typed guest@acme-corp.com
0:05Clicked Sign in
0:09Opened Invoices
0:12Changed the invoice number to INV-8812
0:14Saw Maya Ortiz's invoice, $12,480.00

Ask Wakefield what to fix first.

Ask what matters most. Start a scan, read a trace, or retest a fix, in plain language. From the console, or from your own MCP client.

Learn more ›
Show me my open critical findings
Searched vulnerabilities · open, critical✓
Three are open. The worst is Member can export another tenant's customers on api.acme-billing.app. The PoC agent reproduced it twice.
Ask Wakefield
Default model ↑

Works where your team works, including your MCP client.

Connect GitHub, Bitbucket or Forgejo. Send findings to Slack, Linear or Jira. Add Wakefield to Claude Code or any MCP client with one command.

Learn more ›

Integrations & MCP

AppsAPI and MCP
Source Control
GitHubConnect repositories for security analysis.
Connect
BitbucketConnect repositories for security analysis.
Connect
ForgejoConnect a self-hosted source code instance.
Connect
Integrations
SlackSend findings and fixes to a channel.
Connect
LinearCreate issues for new findings.
Connect
JiraCreate issues for new findings.
Connect

Guardrails

Built to stay inside the lines you set.

Wakefield is SOC 2 compliant and has guardrails to protect sensitive data.

See what Wakefield finds in your app.

Book a demo