What is quodeq
Hand your repo to a senior engineer and ask for a full audit. That's quodeq, except it takes minutes instead of weeks.
An AI agent reads your code file by file, follows the imports, and tells you what's solid, what's broken, and how to fix it. Every score backed by ISO 25010. Every finding mapped to a CWE. Not a linter. It actually reads your code.
Watch a full audit
One real project, from first scan to fix plans. More videos
What it finds
-
CRITICAL
src/db.py:15
SQL injection via string concatenation
CWE-89
query = f"SELECT * FROM users WHERE id = {user_id}" -
MAJOR
src/auth.py:42
Hardcoded credentials in source code
CWE-798
credentials = {"user": "admin", "pass": "secret123"} -
MINOR
src/utils.py:23
Bare except clause hides errors
CWE-396
except: pass -
COMPLIANT
src/api.py:88
Parameterized query prevents injection
CWE-89
cursor.execute("SELECT * FROM users WHERE id = ?", (user_id,))
This is real output. The offending line, the reason, the CWE, and a fix plan you can paste straight into your agent. Compliant findings count too, they cite the CWE the code defends against. Everything lands as JSON on your machine.
