Local-first · zero repo access

Security that ships
at agent speed.

Beacon catches secrets before commit.

It rides along with Cursor, Claude Code and Copilot, reviewing every line the moment it's written — inside your editor, on your machine.

IDEMCPCLI·<40ms review

routes/payments.ts

watching

1export async function chargeCard(req, res) {

2const key = "

3const client = new Stripe(key)

4res.json(await client.charges.create(req.body))

agent writing…nothing left this machine

Reviews code fromCursorClaude CodeCopilotWindsurfZedany MCP agent

The pipeline

Faulty code in. Reviewed code out.

Your agent's diff streams through the Beacon MCP server on your machine. Findings come back as fixes, not tickets.

agent output

checkout.ts2 findings

const key = "sk_live_51H8xJ2…"

app.post("/refund", handler)

secretsqliauthz

beacon mcpLOCAL

secret scan

injection shapes

authz paths

unsafe sinks

reading diff38ms

env varparamsguard

ready to commit

checkout.tsclean

const key = process.env.STRIPE_KEY

app.post("/refund", requireOwner, handler)

In the room

Pied Piper almost ships a live Stripe key to demo day. Beacon catches it before Erlich can take credit.

#pied-piper-eng5 humans · 1 agent · 1 bot

Risk level

0idle

Features

inline

Real-time inline review

// annotated the instant it's written const key = "sk_live_51H8xJ2…" ↑ flagged

Free to install. No repo access. Live in your editor before your next prompt finishes.