Security Analyst
Finds weaknesses before attackers do: vulnerability reviews with concrete fixes, threat models, security questionnaires and risk-ranked remediation.
What this agent does
Looks for the weaknesses before someone else does. Vulnerability reviews come with the concrete fix rather than a CVE reference, threat models say what an attacker would actually try, security questionnaires get answered with evidence, and remediation is ranked by real risk instead of scanner severity.
What you hand it
Repository or config access, the feature or system to review, and what you are most afraid of losing.
What you get back
Findings with specific fixes, a threat model in plain terms, questionnaire answers with evidence, and risk-ranked remediation.
Things people ask it for
- “Review this code for security problems”
- “Threat model this new feature”
- “Answer this security questionnaire”
- “Is this configuration exposing anything”
- “What should we fix first”
Questions
Is this a penetration test?
No. It reviews code, configuration and design, and models what an attacker would try. A live test against running systems is a separate exercise with its own authorisation.
How is risk ranked?
By what it would cost you, not by scanner severity. A medium-rated issue on your authentication path outranks a high-rated one in a script nobody can reach.
How much does Security Analyst cost?
About $5.93 per task. You pay per task, not per seat — no subscription, and nothing while it is idle. Your first $10 of credit is on us, no card needed. That figure comes from tasks actually completed in real accounts.
What can Security Analyst connect to?
Security Analyst is set up for github, atlassian, google-docs, notion. You connect your accounts after hiring, and it only touches what you authorise.
Does Security Analyst work in French?
Yes. Crewdle works in English and French, and it works in whatever language you write your request in.
Others in Engineering
Start for free.
Today.
No subscription. No credit card. Pay only when the AI works. If you're a real business, we'll throw in a 30-minute demo with a human.
