Nothing gets past the llama.
Sentinel reads your code on a sealed machine with the network off, finds every place your users’ personal data or your keys could leak, and gives you the exact fix. One clean month earns a Privacy-Ready badge your buyers can check.
Click to lock
A sample report
Grouped by privacy risk. Each with the fix.
Upload a zip or connect a repo. Sentinel opens it on a sealed machine with the network off, follows your users’ data through the code, and returns this. Then it shreds the source.
console.log("signup", user.id);Click a finding to see its fix. Illustrative report; each row names the Live or Beta rule that finds it.
Everything we check, and what we don’t →Follow a scan from zip to shred →
Who it’s for
Three doors. One scanner.
You built it with Lovable, Cursor, Replit, Bolt or v0. One scan finds the open database, the key in the frontend and the user data going to AI, with fixes you can paste back in.
One scan, $499 →Startups, engineering teams and agencies. Privacy evidence from the code you ship, a monthly streak, and a badge your buyers and clients can check.
Path to Platinum →Incubators and accelerators. Scan the whole cohort, see who is Privacy-Ready and what is in the way, without reading a repo.
Sentinel for Programs →The Privacy-Ready badge
Earned by the month. Kept by staying clean.
One clean month earns Bronze. Each consecutive clean month adds a tier, up to Platinum. A month that closes with a critical finding resets the streak. Every badge is dated, scoped and checkable.
Verify a badge
BL-7K3Q-9M2XEvery badge carries a number and links to a live page: tier, scope, period, expiry.No code, findings or people are shown.What the badge means →Privacy-Ready badges describe automated code scans for the stated period and scope. Not an audit, attestation or SOC 2 report; SOC 2 reports come only from licensed CPA firms.
Pricing
Privacy proof, priced for builders.
Bronze scan
one time · badge valid 3 months
- Full scan of one codebase + 1 free fix-check rescan
- Findings grouped by privacy risk, with fixes
- Privacy-Ready Bronze on a clean result
Path to Platinum
per month · 6-month term · $1,794 total
- 10 scans a month: repos, cloud, site
- Bronze → Silver → Gold → Platinum
- Live badge + public verification page
- Evidence binder at Platinum
Sentinel for Programs
per scan · 30+ scans or companies
- Cohort dashboard
- Who’s ready, who’s close, what’s in the way
- Path pricing for companies that continue
Questions
The honest answers.
Is this a SOC 2 report?
No, and we say so everywhere the badge appears. A SOC 2 report can only be issued by a licensed CPA firm after an audit. The Privacy-Ready badge says your code passed Sentinel’s automated privacy scans for a stated, dated period. Think of it as pre-SOC 2 readiness: useful evidence before an audit, never a substitute for one.
Do you keep my code?
No. Each scan runs in a fresh, disposable machine with no network. The code is read, never executed, then shredded. Results are encrypted to your organization’s key, and every time anyone reads them it’s logged.
What exactly do you check?
Places your users’ personal data or your keys could leak: logs, analytics and ad trackers, AI model calls, URLs, browser storage, error reports, open storage buckets and Firebase rules, committed secrets, and routes that hand out data without a login. The full list, with what is Live and what is Beta, is on the What we check page.
What does a clean scan mean?
That no leaks of the types we check were found in that scan. It is not a promise that nothing can ever go wrong, and it does not cover code quality, penetration testing or legal compliance.
What does it take to earn Bronze?
One clean month: scans with no open critical or serious findings, and the core policy documents on file. Warnings don’t block Bronze; they’re listed with fixes.
What happens if I regress?
The next scan shows it. You have until the end of the month to fix it. If a month closes with open critical findings, your streak resets to the tier you can still prove.
Does it replace Vanta or Drata?
No. They run the compliance checklist; Sentinel reads your code for personal data. They sit side by side.
