RedNest
Getting started

Getting started

Sign in with GitHub, run your first scan, and optionally connect a Solana wallet for planned $RED holder access.

View Markdown

RedNest is an AI-powered security scanner for GitHub repositories. It maps attack surface, hunts for exploitable paths, and reports findings with evidence: the way in, the path through your code, a proof of concept, and a fix prompt for your coding agent.

You can start with a public Quick Scan (no GitHub App install), or install the GitHub App for private repos, Dig scans, and automatic pull request reviews.

Set up with your agent

Paste this into Claude Code, Cursor, Codex or any other agent (or press Set up with your agent on the home page):

Set up RedNest for me: it finds exploitable vulnerabilities in my GitHub repositories (https://rednest.tech).
Read https://rednest.tech/docs/agents.md and follow it. Connect to its MCP server (https://rednest.tech/api/mcp) if you can add one, otherwise use its HTTP API with the device flow.
Then call get_me and work through next_steps. Only ask me for what needs me: approving the connection and installing the GitHub App. Do not assume payment or free credits are available.

Your agent connects and can start scans once you approve it and install the App where needed. Hosted access uses one lifetime free scan per GitHub account; $RED holder scanning is not active yet. See Use it from your agent.

Or set it up yourself

  1. Sign in with GitHub. Go to Get started and continue with GitHub.
  2. Run a Quick Scan (optional). On Scans, paste a public GitHub repository URL. No App install is required for public Quick Scans.
  3. Install the GitHub App for private repositories and continuous reviews. From Repos, choose Add repositories, pick the account and repos RedNest may read.
  4. Accept organization sponsorship (for automatic PR reviews on an org). An admin accepts sponsorship in Settings.
  5. Connect a Solana wallet (optional, ahead of $RED launch). In Settings, connect and sign a verification message. Holder scanning stays disabled until the official launch.

First scan

  • Free: one lifetime chargeable scan per authenticated GitHub account (Pricing).
  • After $RED launch (planned): verified wallets holding at least 50,000 $RED get up to 50 scans per UTC month.
  • Findings appear in the dashboard and, for installed private repos, on pull request Checks and comments.

Next steps