Getting Started
Dam Secure is a security platform for engineering & AppSec teams that build software using AI agents like Cursor, Claude Code and GitHub Copilot.
Dam Secure finds vulnerabilities in your pull requests, on your main branch, and in the dependencies you install:
- Pull requests → We scan pull requests, merge requests (whatever your flavour) to ensure that security issues don't make their way to production.
- Your main branch → We scan the whole repository to surface the security issues already in your codebase.
- Dependencies → We scan the open-source packages your repositories install and report known vulnerabilities against them.
Your codebase is our context. We analyze each repository to understand its structure, technologies, and likely attack paths, so findings reflect how your code actually behaves. This ensures you can get started protecting your codebase regardless of how proficient you are in cybersecurity.
These docs cover everything from connecting your first repository to triaging issues and bringing Dam Secure into your editor.
Quickstart
Two steps and you're protected.
1. Connect your repositories
Visit Get Started to talk about your code security. Dam Secure creates your named workspace and sends its first Admin an invitation for their exact email address. After accepting it, the Admin can invite the rest of the team and add a repository.
Dam Secure analyzes your code and builds the security context it needs to scan it.
2. Connect your editor
Install the Dam Secure MCP to review and triage issues without leaving Cursor, Claude Code, VS Code, or Codex. See Installation.