> ## Documentation Index
> Fetch the complete documentation index at: https:// zenveil.dev/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# ZenVeil Documentation

> AI-powered security scanning for every developer. Detect secrets, vulnerabilities, and supply chain risks — and fix them automatically.

```bash theme={null}
# Install, scan, and fix — in three commands
pip install zenveil
zenveil login
zenveil scan repo .

# ╭─────────────────────────────────────────────────────────╮
# │  ZenVeil · 4 findings · CRITICAL: 1 · HIGH: 2          │
# │                                                         │
# │  ZG-A1B2  CRITICAL  AWS access key      config.js:14   │
# │  ZG-C3D4  HIGH      .env committed      .env            │
# │  ZG-E5F6  HIGH      Token in storage    login.js:47    │
# │  ZG-G7H8  MEDIUM    Debug mode enabled  app.js:3        │
# ╰─────────────────────────────────────────────────────────╯

zenveil fix ZG-A1B2 --auto-pr --repo owner/repo
# Opened pull request: https://github.com/owner/repo/pull/42
```

## The security scanner that fixes itself

ZenVeil scans your repositories, APIs, and CI/CD pipelines for secrets, OWASP vulnerabilities, and supply chain risks — then uses AI to explain every finding and generate production-ready remediation pull requests. No security team required.

> [card] [Quick Start — 60 seconds](https:// zenveil.dev/docs/quickstart.md)
>
> Install ZenVeil, run your first scan, get your first finding fixed. One copy-paste away.

> [card] [Why ZenVeil?](https:// zenveil.dev/docs/why-zenveil.md)
>
> The case for autonomous security remediation in a world of AI-generated code.

> [card] [CLI Reference](https:// zenveil.dev/docs/cli/overview.md)
>
> Every command, every flag, every option — with real examples and sample output.

> [card] [API Reference](https:// zenveil.dev/docs/api-reference/overview.md)
>
> Integrate ZenVeil directly into your platform. REST API with streaming AI responses.

## What ZenVeil catches

> [card] Secrets & Credentials
>
> AWS keys, GitHub tokens, private keys, JWT tokens, hardcoded passwords — with sub-millisecond detection.

> [card] OWASP Top 10
>
> Broken auth, IDOR, XSS vectors, open redirects, injection paths, insecure deserialization.

> [card] Supply Chain Risks
>
> Dependency confusion, floating versions, missing lockfiles, known CVEs via OSV.dev.

> [card] API Security
>
> Missing security headers, CORS misconfigurations, exposed endpoints and HTTP downgrade paths.

> [card] CI/CD Risks
>
> Workflow injection, unpinned actions, overprivileged tokens, debug mode in production.

> [card] AI Remediation
>
> Claude-powered explanations, fix suggestions, and automatic GitHub PR creation.

## First win in three commands

```bash theme={null}
pip install zenveil
zenveil login
zenveil scan repo .
```

That's it. ZenVeil scans your current repository, surfaces every finding with severity, OWASP category, evidence, and an AI-generated fix — right in your terminal.

> [!NOTE]
>
> ZenVeil works offline for local scans. Network access is only needed for GitHub scanning, CVE lookups via OSV.dev, and AI-powered analysis (explain/fix/triage).

## Trusted by security-conscious teams

ZenVeil is built for developers who want security without friction — from solo founders shipping fast to platform teams enforcing DevSecOps at scale.

* **Zero config scanning** — point it at any directory and go
* **Git-native** — findings link directly to file, line, and column
* **AI-native** — every finding has an explanation, a fix, and optionally a PR
* **Privacy-first** — no code leaves your machine during local scans
* **CI-ready** — exits with code 1 on critical/high findings, perfect for gates


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.