Rafter
Simple security for AI-written code
At a glance
Price not confirmed · Source review 2026-11-02- Price & billing
No price amount was verified on the official pages reviewed on 2026-11-02: the homepage says scanning starts free with no credit card required and a free plan is included, but no $0 amount is stated, and the pricing page rendered only a loading state. Recheck official pricing before purchase.
- Free allowance
No price amount was verified on the official pages reviewed on 2026-11-02: the homepage says scanning starts free with no credit card required and a free plan is included, but no $0 amount is stated, and the pricing page rendered only a loading state.
- Best suited to
People building apps with AI coding agents who want plain-English security findings before shipping
Fit is editorial guidance, not a measured result.- Platforms
Access: not separately verified. Operating systems not separately verified.
Published-source facts and editorial guidance. No product test is implied. Confirm current conditions before purchase.
No product screenshot is claimed for this listing. Use the official website ↗ to inspect the current interface.
What to know before choosing
Good fit
People building apps with AI coding agents who want plain-English security findings before shipping
Limits and trade-offs
The official pricing page rendered only a loading state, so no price amount was verified; the homepage mentions a free plan but states no $0 amount; no authenticated product test was run.
Plans and free allowances
No price amount was verified on the official pages reviewed on 2026-11-02: the homepage says scanning starts free with no credit card required and a free plan is included, but no $0 amount is stated, and the pricing page rendered only a loading state. Recheck official pricing before purchase.
Evidence
Official homepage ↗ (reviewed 2026-11-02)
Official published page review; no authenticated product test
Dates: Last reviewed 2026-11-02. Last reviewed is the latest source or editorial review date; it is not a content-change date.
A closer look at Rafter
Rafter is an open-source security layer for AI-assisted development that helps identify vulnerabilities, prevent secret leaks, audit dependencies and extensions, and provide security context while building. It works two ways: as a prompt and API key wired into a coding agent so risks surface inside the agent feedback loop, and as a one-click dashboard scan where a user connects a GitHub repository and gets findings with severity, file location, and remediation in under 2 minutes. It also ships a command-line tool and an API for CI/CD pipelines.
Editorial guidance based on published documentation. The workflow below is a suggested starting point, not a measured product result.
When to choose Rafter
- Vibe coders and solo builders shipping apps made with AI coding tools
- Teams that want security findings their AI agent can act on directly
When to choose something else
- Users who need a scan without connecting a GitHub repository or running the CLI
- Users who need a closed-source managed security service rather than Rafter's open-source layer
A practical starting workflow
- Paste the Rafter prompt into a coding agent and set the API key, so the agent consults Rafter at every step.
- Alternatively, connect a GitHub repository in the dashboard and run a one-click scan.
- Review findings by severity and location, including secret leaks, vulnerable patterns, and risky dependencies.
- Hand the remediation to the AI agent or apply the fix, before the change ships.
Check before committing
- Vendor claims on the official page are not guarantees; actual results, quality and availability must be tested in the product.
- Prices and features may change after this review; recheck the official site before purchase or signup.
Common questions
What does Rafter do?
It is an open-source CLI that helps identify vulnerabilities, prevent secret leaks, audit dependencies and extensions, and provide security context as you build.
How does it work with a coding agent?
You paste its prompt into the agent and set an API key; the agent then consults Rafter at every step, and findings arrive with severity, location, and remediation.
Can I scan without using the command line?
Yes. The homepage describes a one-click dashboard scan: connect GitHub, select a repo, and click scan, with results in under 2 minutes.
What kinds of issues does it flag?
The homepage names vulnerability detection, secret scanning, common AI mistakes, and insecure dependencies.
Is there a free plan?
The homepage says there is a free plan included and that scanning starts free with no credit card required, but no $0 amount was verified on the pages reviewed, so no free-tier amount is asserted.
Compare approaches for this task
- Aider — Developers who work in a local Git repository and want an LLM to edit code with them from the command line.
- AI Code Reviewer — Developers who want a quick AI review of a code snippet in the browser.
Sources and checks
Last source review is not a date of product testing. No rating or test result is implied by inclusion. Check the current plan and terms before buying.