Secrets slipped in by the assistant
API keys and passwords copied into the code are detected at commit, and the group’s secrets vault gives them a proper home.
Live
What happens after every commit
Your assistant produces code. The platform reads it, assesses it and hands you a fix, before the code reaches your users.
- criticalPlain-text secretmoved to the secrets vault
- majorSQL injectionparameterised query recommended
- majorVulnerable dependencyfixed version indicated
- to reviewUnreviewed AI codehuman review recorded
Ready to ship, watched 24/7
Who does what
You
You choose your assistant and your way of codingYou push to your forge, as usualYou fix with the recommended correction in front of youYou ship, faster than before
LuxGap
Reviews every commit: secrets, injections, dependencies, OWASPFlags AI-generated code that nobody reviewedReplays your journeys with a test robot and pentests the deployed applicationHosts, backs up, keeps your secrets and monitors 24/7 with the SOCFiles the compliance evidence, ready for the auditor
What AI forgets
The blind spots of generated code, covered
Dubious or vulnerable dependencies
Every added library is checked: published vulnerabilities, incompatible licence, dubious package.
Forgotten access controls
Injection, access to another customer’s data, a removed filter: the flaws the assistant did not see come out ranked by severity.
Code nobody reviewed
Code produced by an assistant and never reviewed by a human is flagged and traced: which file, which date, which review.
Silent regressions
An AI-driven robot replays your business journeys on every release and reports what no longer works.
Going to production
Sovereign hosting, daily backups and 24/7 monitoring: the code that reaches production is expected by a team.
Getting started
Up and running without changing how you work
- Read-only accessYou open read-only access to your forge. Nothing to install in your code or your pipelines.
- First analysisThe line count and the first findings appear in your portal from the first pass.
- Cruising speedEvery commit is reviewed, every finding comes with its recommended fix, and the evidence builds up by itself.
Frequently asked questions
Do we have to give up AI assistants to stay compliant?
No. No regulation forbids writing code with an assistant. NIS2 does, however, require security in the development and maintenance of your systems, and your customers and auditors increasingly ask which code was generated by AI. The platform traces it and proves it.
Is my code sent to an AI provider?
No. The LuxGap AI runs on LuxGap infrastructure in Luxembourg, with no exposure to the Internet. Analysis by an external AI exists only as an option, on explicit request.
Which assistants and which languages?
All of them. The platform reads the code, not the tool that wrote it: Copilot, Cursor, Claude Code or any other assistant, in every language, on GitHub, GitLab or Azure DevOps.
How much does it cost?
EUR 0.01 excl. VAT per line of code per month, minimum EUR 250 excl. VAT per month, 12-month commitment. Hosting, backups, the secrets vault and the 24/7 SOC are added on quotation.
Keep the speed. We hold the security.
Describe your software: LuxGap replies within 24 hours with a firm quotation.
€0.01 excl. VAT per line per month · Minimum €250 excl. VAT per month · 12-month commitment