Dryrun Security

What is Dryrun Security?

Dryrun Security is an AI-powered GitHub App that reviews every pull request for security issues as you code. It analyzes code changes to determine whether they are safe, making security review part of the normal development workflow rather than a separate chore. It supports a range of languages and frameworks and delivers feedback within seconds of opening a pull request.

Setup is minimal: install the GitHub App on the repositories you want to protect — installation takes about a minute — and no extra steps are required. Whenever you open a pull request, checks run automatically and you get security context before merging, usually within a few seconds.

Who created Dryrun Security?

The company was founded by James Wickett (CEO and Co-Founder) and Ken Johnson (CTO and Co-Founder). James started the company because he believes developers care about security and quality but have often been underserved by the tools the security industry provides. Ken previously led internal security code reviews at GitHub. Dryrun Security launched with the goal of automatically checking code for security issues as developers write it.

What is Dryrun Security used for?

Dryrun Security provides quick security reviews on pull requests. It examines how authentication and authorization are handled and reviews sensitive code paths and functions for potential problems. The analysis is designed to produce detailed findings with fewer incorrect alerts, helping protect every code repository and speed up the development pipeline.

Who is Dryrun Security for?

Dryrun Security is designed for developers and security professionals who want security context built into their normal workflow.