Analyze · free during early access
Add your agent code. See every path in seconds.
Point ExfilPath at a file or a whole project folder and it maps where untrusted input enters, which actions can leak data or change systems, and whether anything stands between them — then shows you the smallest change that closes each open route. Free during early access.
Free in early access46 detectorsTypeScript · JavaScript · PythonYour agent is never executed
How to read a report
An open path means the value reaches a sensitive action with nothing covering it. A closed path means a control already stands in the way — worth knowing, not worth fixing. Confidence tells you how direct the route is.
The full methodBring the whole repository
Folder selection reads your project the way the platform does in a pipeline: dependencies and build output are skipped, and routes are traced across files rather than judged one file at a time.
DocumentationThen make it continuous
Once you have closed the open paths, put a threshold in your pipeline so the next one fails the build in the pull request that introduced it.
Set up enforcementGood to know
What happens to your code.
Analysis is static: your source is read in your own session, is never executed, and no model provider is involved at any point. Enterprise deployments run the same analysis entirely inside your network.