Skip to content

Autonomous Remediation (private beta)

Private beta

Autonomous Remediation is in private beta. You apply for a place at squr.ai/autonomous-remediation. It is included for the duration of the beta at the standard pentest price.

A finding used to be a ticket. With Autonomous Remediation, each confirmed finding arrives as a pull request on your GitHub repository: the code change and a regression test, ready for your review.

The loop

  1. Find. A whitebox pentest reads your code and tests your running application.
  2. Prove. Every confirmed finding is exploited against the live application before it is reported.
  3. Fix. Starting with the highest severity, SQUR writes the fix and a regression test and opens a pull request.
  4. Re-test. The next pentest re-tests every open finding and marks it Fixed, Regressed or New. A clean run refreshes your certificate.

Set it up

  1. Apply for the private beta and book the setup call.
  2. Install the SQUR GitHub App on the repositories you want covered. It opens pull requests and nothing else.
  3. Run a whitebox pentest as usual: target, roles, scope.
  4. Review the pull requests. Merge, change or close them like any other.

What you can rely on

Guarantee Detail
Draft pull requests only SQUR never merges. Your branch protection applies as always.
Application code only A fix changes application code and adds a test. Workflows, CI configuration and dependency manifests are off limits.
Checked before it reaches you The fix compiles, passes static analysis and ships with its regression test. A second review runs before the pull request opens.
Secrets stay out Pull request descriptions are written from the finding, never from raw evidence, and scrubbed for secrets.
Erasable Disconnect the repository and SQUR erases its source snapshot, closes its pull requests and deletes its branches.
EU residency The source snapshot used for the pentest and the fix stays in the EU.

Limits

  • GitHub only today.
  • Black-box pentests keep delivering remediation guidance per finding, as described in Remediation view.
© SQUR