Drydock
← Back to audit

You pay for the fix, not the finding

Finding problems is cheap, so we do it for free. Fixing them takes real work, and that is the only thing we charge for.

Audit

Free

Three audits a day per IP address. No account, no card, no sign-up.

Finds

  • Secrets committed in code or in a tracked .env
  • A .gitignore that does not cover secret-bearing files
  • No test suite
  • No CI workflow
  • No Dockerfile

Does not include

  • No readiness score out of 10
  • No review of authentication or access rules
  • No review of injection risk in your queries
Run an audit

Fix Pack

…

Per audit, paid once by card. Not a subscription — nothing recurs and nothing is stored to charge again.

You get a pull request containing

  • Each hardcoded secret replaced with an environment variable reference
  • A committed .env removed from version control, with every variable name preserved in .env.example
  • A .gitignore that covers .env files and key material
  • Per-provider instructions for rotating every secret that leaked, because deleting it from code does not make it safe
  • Your own test suite run against the change before the pull request opens

Plus the full review the free scan leaves out

  • A readiness score out of 10
  • Authentication and access rules reviewed
  • Injection risk in your queries reviewed

Linked from the pull request, run against the same code. One review per Fix Pack — it is not a subscription.

Nothing is merged for you. The pull request sits there until you read the diff and decide.

Before you can buy a Fix Pack

  • Run a free audit on a public GitHub repository. A Fix Pack opens a pull request, so there has to be a repository to open it against — an uploaded zip cannot be fixed.
  • Install the Drydock GitHub App on that repository, so we can push a branch and open the pull request.
  • The audit has to contain something we can actually fix. If it doesn't, checkout refuses rather than selling you a pull request with nothing in it.

Enterprise

Coming soon

For teams that want Drydock to own more of the path to production. These aren't live yet — no checkout, nothing to buy. Listed here so you know where we're headed.

  • Preview environments

    Spin up a disposable, running copy of a branch to see the fix work before it merges.

  • Deploy Pack

    Generated Dockerfile and CI workflow so the app is packaged to run on your own hosting.

  • SBOM & dependency scanning

    A software bill of materials plus alerts on known vulnerabilities in your dependencies.

Already bought something and lost your key? Recover it here.