Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Norma consistently verifies AI-generated code against a set of governed rules, delivering the same outcome each time. This verification process occurs in two distinct environments: Livecheck, which assesses a specific file or code snippet upon request from editors such as Cursor, Claude Code, Windsurf, or VS Code, and Full Scan, which conducts a thorough audit of an entire GitHub or Bitbucket repository, identifying the technology stack and frameworks even in the absence of a configuration file, while prioritizing issues based on severity and providing the necessary context for remediation. Evaluations of the rules are conducted through static analysis, ensuring that results remain consistent across different runs. The rules are derived from SOLID design principles and specific conventions for various technology stacks, with the flexibility to disable those that are not applicable. The coverage of this system includes multiple programming languages and frameworks, such as JavaScript, TypeScript, Python, PHP, Java, Node, React, and Supabase. Additionally, the MCP server provides a range of functionalities, including link_repository, get_rulesets, get_rules_for_ruleset, live_check, get_open_issues, and register_applied_actions, all secured by OAuth and listed on the Official MCP Registry. This robust framework ensures that developers can maintain high code quality while adapting to various project requirements seamlessly.
Description
Rafter is a security scanning platform designed with developers in mind, enabling the identification and resolution of vulnerabilities in GitHub repositories through a simple click or command. Its integration is smooth via a web-based dashboard, command-line interface, or REST API, allowing for the scanning of JavaScript, TypeScript, and Python code to uncover various issues such as exposed API keys, SQL injection vulnerabilities, XSS flaws, insecure dependencies, hardcoded credentials, and weaknesses in authentication. The results are organized into three clear categories: “Errors,” “Warnings,” and “Improvements,” each providing in-depth explanations, specific code locations, remediation guidance, and formatted prompts that can be easily utilized in AI coding tools. Users can access findings in both JSON and Markdown formats, automate scans as part of CI/CD pipelines, and seamlessly integrate scan results into their existing workflows. Rafter’s flexible approach accommodates no-code, low-code, and full-code environments, ensuring that developers can implement proactive security measures early in the software development process, making it not only effortless but also scalable as project requirements grow. This adaptability allows teams to maintain a robust security posture while focusing on delivering high-quality software efficiently.
API Access
Has API
No
API Access
Has API
Yes
Integrations
Claude Code
Yes
Cursor
Yes
Git
No
GitHub
No
JSON
No
JavaScript
No
Lovable
Yes
Markdown
No
Model Context Protocol (MCP)
Yes
Python
No
Integrations
Claude Code
No
Cursor
No
Git
Yes
GitHub
Yes
JSON
Yes
JavaScript
Yes
Lovable
No
Markdown
Yes
Model Context Protocol (MCP)
No
Python
Yes
Pricing Details
$199/month
Free Trial
No
Free Version
Yes
Pricing Details
$39
Free Trial
No
Free Version
Yes
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
Quality Clouds
Founded
1986
Country
United Kingdom
Website
qualityclouds.ai/norma
Vendor Details
Company Name
Rafter
Country
United States
Website
rafter.so/
Product Features
Product Features
Vulnerability Scanners
Asset Discovery
No
Black Box Scanning
No
Compliance Monitoring
No
Continuous Monitoring
No
Defect Tracking
No
Interactive Scanning
No
Logging and Reporting
No
Network Mapping
No
Perimeter Scanning
No
Risk Analysis
No
Threat Intelligence
No
Web Inspection
No