Can't I just ask my AI to fix the issues?

You can — and you should apply the fixes in your coding tool — but the hard part of security work is knowing what to ask it to fix. A general prompt like 'find the security problems' returns a vague list of best practices, not a precise, ranked fix list anchored to your repo. Ephyra gives your tool the specific inputs it needs: where the issue is, why it matters, and what needs to change.

Does Ephyra fix my code for me?

No — Ephyra diagnoses. You take the prioritized fix list to your coding tool and apply the changes there. The hard part of security work is knowing what to ask your tool to fix; Ephyra gives you that precise list — where the issue is, why it matters, and what needs to change.

Do I also need a human code review?

Ephyra is the fastest first security layer. It catches the common documented flaws quickly and cheaply. A broader engineering review adds value on architecture and unusual business-logic questions when you need it. Ephyra is not less reliable; it answers different questions.

No — Ephyra reads your repository during the scan, then deletes the working copy. Your report stays available to you.

How long does a scan take?

Most scans finish in a few minutes. Larger repositories can take longer.

Which repositories are supported?

GitHub repositories. We connect with read-only access — we cannot modify your code.

Can't I just ask my AI to fix the issues?

You can — and you should apply the fixes in your coding tool — but the hard part of security work is knowing what to ask it to fix. A general prompt like 'find the security problems' returns a vague list of best practices, not a precise, ranked fix list anchored to your repo. Ephyra gives your tool the specific inputs it needs: where the issue is, why it matters, and what needs to change.

Does Ephyra fix my code for me?

No — Ephyra diagnoses. You take the prioritized fix list to your coding tool and apply the changes there. The hard part of security work is knowing what to ask your tool to fix; Ephyra gives you that precise list — where the issue is, why it matters, and what needs to change.

Do I also need a human code review?

Ephyra is the fastest first security layer. It catches the common documented flaws quickly and cheaply. A broader engineering review adds value on architecture and unusual business-logic questions when you need it. Ephyra is not less reliable; it answers different questions.

No — Ephyra reads your repository during the scan, then deletes the working copy. Your report stays available to you.

How long does a scan take?

Most scans finish in a few minutes. Larger repositories can take longer.

Which repositories are supported?

GitHub repositories. We connect with read-only access — we cannot modify your code.

Legal disclosure

Impressum

Angaben gemäß § 5 DDG (Digitale-Dienste-Gesetz)

Diensteanbieter / Service provider

Luann de Carvalho Sapucaia
trading as / handelnd unter „Ephyra“
Ringbahnstraße 56
12099 Berlin
Germany

Kontakt / Contact

Email: contact@ephyra.tech

Umsatzsteuer-Identifikationsnummer / VAT ID

VAT identification number pursuant to § 27a of the German VAT Act (Umsatzsteuergesetz):
DE458681629

Berufsbezeichnung / Professional status

Operated as a freelance activity (freiberufliche Tätigkeit) within the meaning of § 18 EStG. No entry in the commercial register (Handelsregister) and no chamber membership applies to this activity.

Verantwortlich für den Inhalt nach § 18 Abs. 2 MStV

Luann de Carvalho Sapucaia, address as above.

Consumer dispute resolution / Verbraucherstreitbeilegung

We are neither obliged nor willing to participate in dispute resolution proceedings before a consumer arbitration board (Verbraucherschlichtungsstelle).

Liability for content

As a service provider we are responsible for our own content on these pages in accordance with general law (§ 7 (1) DDG). Under §§ 8–10 DDG, however, we are not obliged to monitor transmitted or stored third-party information, or to investigate circumstances that indicate unlawful activity. Obligations to remove or block the use of information under general law remain unaffected; any liability in this respect is only possible from the point in time at which we become aware of a specific infringement, and we will remove such content promptly upon becoming aware of it.

Liability for links

Our service may contain links to external third-party websites over whose content we have no control. We therefore cannot accept any liability for this third-party content. The respective provider or operator of the linked pages is always responsible for their content. We will remove such links promptly if we become aware of any legal infringements.

Copyright

The content and works created by the operator on these pages are subject to German copyright law. Contributions by third parties are identified as such. Reproduction, processing, distribution and any kind of use beyond the limits of copyright require the written consent of the respective author or creator.