V12 Docs

Introducing V12

Autonomous security with exploit-verified findings and automated patches.

V12 is an autonomous security agent that audits your code, generates executable proof-of-concept exploits, and patches what it finds — so you ship with fewer vulnerabilities and fewer false positives.

Already signed up? Get started now:

V12 walkthrough

What V12 excels at

Full repository audits

Scan any branch or commit hash. Choose which directories to include or exclude — for example, skip vendor and interface code you don't own. You're billed based on the estimated cost shown before each run.

Pull request review

V12 scans only the files changed in a PR, keeping results focused. Supports commit ranges, patch file uploads, and automatic triggering whenever a PR is opened.

Exploit-verified findings

For every potential vulnerability, V12 generates a proof-of-concept test and executes it in a live environment. If an exploit can't be made to pass, the finding is automatically invalidated before it reaches you.

Automated patching

V12 generates a recommended fix for each confirmed finding, then re-runs the original exploit against the patched code. If the exploit no longer passes, the patch is marked verified.

Getting the best results

  • Scope your scans carefully — exclude vendor and interface code to reduce noise and cost
  • Use PR mode for day-to-day development; full audits before major releases
  • Triage findings using valid, invalid, or acknowledged to help V12 learn your preferences over time
  • Trigger V12 manually from GitHub by commenting v12 pls audit on any PR

The V12 interface

Pricing

V12 uses usage-based pricing — you pay only for what you scan, based on the estimated cost shown before each run. There are no seats and no subscriptions.

Getting access

Sign in at v12.sh using Google OAuth. Then connect your GitHub account to authorize repo access — this allows V12 to list your repositories and read their contents. No write access is required to run audits.

Note

The GitHub OAuth prompt says "act on your behalf" — this is standard language shown for every GitHub app integration. In practice, V12 only reads your repository list and file contents.

Coming soon

V12 is actively shipping the following features based on user feedback:

Roadmap

  • Context enrichment — V12 will learn from your valid/invalid/won't fix decisions over time and surface findings that match what you actually care about
  • Agent and CI/CD API — run V12 programmatically without GitHub, as part of your existing pipeline
  • GitLab and Gitea support — connect repos hosted outside GitHub via the V12 API

Feedback

Questions or feedback? Reach out to the V12 team at hello@v12.sh or use the feedback button in the app.