SAFE CLI
Scan any Erlang or Elixir project from your terminal. No source ever leaves your machine.
CI/CD integration
Integrate SAFE into your pipeline and fail the build on new vulnerabilities — catch issues before they reach production.
SAFE On-Prem
Read the report inside your own infrastructure. Send reports from CI/CD directly to On-Prem and explore it there.
Supply chain analysis
Look beyond your own code: SCA inspects your dependency tree for known-vulnerable packages.
Open Source — Free
Unlimited ELOC (public repos). Community support.
Starter — 25€/mo
Up to 50k ELOC, +20€ per additional 50k ELOC. Standard support.
Team — 70€/mo
Up to 150k ELOC, +20€ per additional 50k ELOC. Standard support.
Enterprise — Talk to sales
200k ELOC+. Premium support.
What does SAFE actually analyze?
SAFE statically analyzes compiled BEAM bytecode — without running it — to identify vulnerabilities that could make your application susceptible to cyber attacks, from injection flaws to risky runtime patterns.
Can I run SAFE on my own infrastructure?
Yes. SAFE can be run on local machines and in CI/CD environments as well, just download the binary. Download the binary →
Does it fit into CI/CD?
Yes. SAFE integrates with your pipeline via the mix_safe and rebar_safe plugins (or the binary), so every commit is checked and risky changes can fail the build automatically.
Who is the security audit for?
Our security audit is designed for teams and businesses using Erlang or Elixir who want to ensure their applications are secure. It's ideal for startups, enterprises, and open-source maintainers looking to identify potential vulnerabilities and strengthen their security posture.
Does the audit detect 100% of vulnerabilities?
No security audit can guarantee finding every vulnerability. Our audit follows a carefully curated checklist developed by the Erlang Ecosystem Foundation's Security Working Group, focused on the most critical security risks for Erlang and core Elixir issues on BEAM-based systems.
What does the security audit include?
SAFE identifies security risks in your Erlang or Elixir codebase. After the audit, you receive a detailed report outlining our findings, with severity levels and explanations.
Do you provide audits for open-source projects?
Yes, we offer free security CI/CD audits for open-source Erlang and Elixir projects to support the community and improve security across the ecosystem.
How long does the analysis take?
The analysis is fast. Results are typically delivered within a few minutes. For larger or more complex codebases, it can take up to 20–30 minutes.