Skip to content
  • DETON
  • Pricing
  • Sign in
  • Sign up

Live evaluation · synthetic sample data

See the proof gate before you connect a repo.

Select a candidate, advance the proof contract, and inspect the evidence packet — the same live surface as the landing page, running on synthetic data. No sign-up, no credit card.

Get started→
app.deton.dev/proof/482
Skip to dashboard content
detonMy workspace

Billing

Account

DDeton workspace

Dashboard

Read-only proof state

Candidate to proof packet

Inspect each candidate and its proof state. Deton treats only confirmed oracle evidence as a vulnerability finding.

2

Confirmed proof

1

Inconclusive

1

Unsupported

Recorded at: 2026-07-06T09:12:00.000Z

Runner boundary

Seeded app, isolated runner, no production target, no external exploitation.

Proof steps

1 Proof running

Coverage boundary

1 Unsupported

Redaction

1

Confirmed proof

Candidates

StateAffected surfaceOracle observation / Coverage boundaryPR

Selected proof moment

Confirmed proof

SQL injection

src/app/api/checkout/route.ts

A changed checkout route interpolates request input into a SQL predicate.

Proof steps

Evidence packet

Evidence

pkt_01JB7Q3M9E

Proof contract
sql-error-oracle.v1
Oracle observation
Database error oracle fired twice on seeded input; sanitized trace attached.
Runner boundary
Seeded app, isolated runner, no production target, no external exploitation.
Redaction
Request and response fragments are sanitized; no secrets or customer data shown.

Redaction

Request and response fragments are sanitized; no secrets or customer data shown.

Runner boundary

Seeded app, isolated runner, no production target, no external exploitation.

Coverage boundary

Proof-enabled in the first pack: SQL error oracle with seeded database boundary.

Packet ID
pkt_01JB7Q3M9E
Run ID
run_20260706_0912
Commit
8f42c1a
State
Confirmed proof

This product view does not scan your app or prove customer code.

A deterministic oracle produced evidence under the configured contract.

Ddeton[bot]commented onacme/payments #482

Exploit proven in sandboxSQLI-01 · src/routes/invites.ts

deton_sql_marker_001sandbox run 41s

Product tour · simulated repository

This demo runs on synthetic sample data. It does not scan a real repository.

← Back to pricing
Deton

Deton scans your pull requests, proves exploitability in an isolated sandbox, and ships evidence packets you can act on before merge.

Product

  • Pricing
  • Compare
  • Demo

Resources

  • Docs
  • Blog
  • Roadmap
  • API

Compliance

  • Security
  • Privacy
  • Terms
  • DPA
  • BAA

Company

  • About
  • Status
  • Feature requests

© 2026 Deton

Proof-gated AppSec · Next.js 16

PrivacyTermsCookies