PreFlight.
Flying blind is bad. PreFlight is a free, in-browser security audit for AI-generated code — 100 probes, nothing leaves your machine, and a guidance track that shows you what you're looking at.
A whole generation of builders is shipping software they didn't entirely write. AI-assisted code is real and it's good — but it fails in patterns, and the people shipping it often have no way to see those patterns before their users do. PreFlight exists so that checking your code before it flies is free, private, and takes minutes.
How it works
Point it at your code and 100 probes run entirely in your browser — mapped to the OWASP Top 10:2025 and the LLM Top 10:2025. There's no upload, no account, no server-side anything: your code never leaves your machine, which is the whole point. It finds the classes of mistakes AI-generated code actually makes — leaked secrets, missing auth checks, injection surfaces, unsafe defaults — and explains each finding in plain language.
FlightSchool
The scanner tells you what's wrong; FlightSchool tells you what to learn, where to aim, and why it matters — a guidance layer for builders working out what they don't know yet. PreFlight deliberately checks for the same things on day one and day one thousand: the tool doesn't tier up, you do.
Why it's free
Because the people who most need it are the people least likely to pay for security tooling — and because trust in a security tool starts with it not wanting anything from you. Open source, MIT-spirited, no gates.