# Foil — AI Security Code Scanner

> Foil is an on-device AI security scanner for developers. The AI model itself runs on Apple Silicon GPUs via MLX — your code never leaves your machine, not even for AI inference.

## What Foil Does

Foil scans source code for security vulnerabilities using on-device large language models. Unlike pattern-matching tools (grep-based SAST), Foil reasons about code semantics — finding logic flaws, auth bypasses, IDOR, race conditions, and other issues no regex can catch.

Community tier includes the **agentic scan** — an autonomous AI scanner that orchestrates the LLM over your codebase.

Developer tier adds **Deep Dive & Deep Scan**:
- Deep Dive — for any finding, the AI explains why it's vulnerable, validates whether it's actually exploitable, and rewrites the code with a fix.
- Deep Scan — a slower, deeper pass over your codebase that catches vulnerabilities a fast agentic scan can miss.

## Plans

- **Community (Free)**: Agentic scan, 162 built-in rules, 7 languages, up to 3 projects, CLI scanning
- **Developer (€29 per user / month or €229 per user / year — save 34%)**: Everything in Community plus unlimited projects, Deep Dive & Deep Scan, JSON/Markdown export, custom rules, API access

Team pricing and volume discounts on request.

## Technical Details

- Runs on: macOS with Apple Silicon (M1, M2, M3, M4, M5)
- LLM: SecureReview-7B (custom-trained, 4-bit quantized, MLX runtime)
- Performance: 20–25 tokens/second on M4/M5; faster on M-series Max/Pro
- Languages: Python, JavaScript, TypeScript, Go, Java, Ruby, C#
- Rules: 162 built-in vulnerability detection rules
- Output: Findings with source context, severity, and fix suggestions

## Install

Prerequisites (skip if already installed):

```
/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
brew install python
```

Then install Foil:

```
brew tap vitorallo/foil
brew install --cask foil
foil scan ./my-project
foil scan --deep ./my-project
```

## Links

- Website: https://foil.peachstudio.be
- Documentation: https://docsfoil.peachstudio.be
- Pricing overview: https://foil.peachstudio.be/pricing
- Developer plan checkout: https://foil.peachstudio.be/pricing/developer
- Beta signup: https://foil.peachstudio.be/beta
- Releases: https://github.com/vitorallo/foil-releases/releases/latest
- Blog: https://medium.com/@vito.rallo
- Compare vs Semgrep: https://foil.peachstudio.be/compare/semgrep
- Compare vs Snyk: https://foil.peachstudio.be/compare/snyk
- Compare vs CodeQL: https://foil.peachstudio.be/compare/codeql
- Privacy: https://foil.peachstudio.be/privacy
- Terms: https://foil.peachstudio.be/terms
- Contact: info@peachstudio.be

## Company

Foil is built by Peach Studio, based in Everberg, Belgium.