Understands the system
Dokima maps repositories, components, attack surfaces and security assumptions before it starts making claims.
AI security reviewer for engineering teams
A security reviewer that never stops reading your code.
Dokima works the way a dedicated security team would: it builds deep context on your repositories, hunts with specialised lenses, challenges its own findings, and comes back as the code changes. Powered by the AI subscription you already have.
Repository review Active
Security review should keep moving
Your codebase does not stand still. Its security review should not either.
Point-in-time reviews age quickly. Rule-based tools can produce more alerts than a busy team can sensibly investigate. Dokima gives engineering teams a review process that keeps its context and keeps working.
A reviewer, not another alert feed
Give your team security work they can use.
Dokima does more than flag suspicious code. It carries every finding through challenge and validation before your team ever sees it.
Challenges the first answer
Candidate findings are reviewed, investigated, deduplicated and validated instead of going straight into a report.
Explains what matters
Developers get concise descriptions, evidence, affected scope and practical remediation alongside the technical detail.
How it works
A complete review lifecycle, run in clear stages.
Each stage has a clear job. Dokima runs the schedule and holds every finding to its quality checks, while your chosen AI runner does the analysis.
- 01
Understand
Build a working picture of the codebase, its components and its security assumptions.
- 02
Hunt
Review components through focused security lenses instead of one broad, shallow prompt.
- 03
Challenge
Question candidate findings and gather the missing context before they reach developers.
- 04
Validate
Check evidence, affected scope and practical impact. Deduplicate overlapping issues.
- 05
Report
Turn the result into a focused report with clear technical detail and remediation.
- 06
Repeat
Return to the codebase as it changes, without rebuilding the review process each time.
Focused findings
A report developers can read, discuss and resolve.
Dokima keeps the plain-English issue, technical evidence, verification status, affected scope and recommended fix together. Findings can be annotated without losing the original review record.
See the sample reportDOK-100042 · Access control
Project members can update records outside their assigned workspace.
The update handler checks that the user is signed in, but does not confirm that the requested record belongs to the user’s current workspace.
Evidence recordedAffected scope mappedFix explained
Illustrative report layout, not a published Dokima benchmark.
Made for the whole codebase
Deeper than a rules pass. More regular than a periodic assessment.
ApproachContextReview cycleTypical output
DokimaCodebase and component contextContinues as code changesReviewed, developer-readable findings
Rule-based scanningRules and local code patternsFast and frequentPattern matches to triage
Periodic assessmentDeep human contextPoint in timeExpert report and discussion
Runs in your workspace
Works with the AI runner your team already trusts.
Dokima runs as a local command-line application on Linux and macOS. It keeps Dokima state and generated reports in your workspace, and supports configurable runners including Codex and Claude.
Your runner’s own terms and configuration determine how it processes source. Dokima does not hide that detail behind vague “local-first” claims.
Read about security and data handling$ dokima
workspace ready
repositories 6 detected
runner codex
$ dokima sweep --mode full
review plan 24 stages
status runningStraightforward subscription
One product. No per-run meter.
Every plan includes the complete Dokima workflow, unlimited supported repositories and unlimited Dokima runs. Your team provides its AI runner and pays that usage separately.
Starter$395
per month · up to 5 contributors
Team$995
per month · up to 15 contributors
Growth$2,495
View pricingper month · up to 40 contributors
See what Dokima finds
Put an AI security reviewer to work on your codebase.
Request a full-product trial for your engineering team. No payment card required.