How Amnify works - Amnify

Amnify runs one loop, continuously. Every page in the product is a view onto some stage of it.

Stage	What happens
Connect	You connect sources and choose exactly which repositories, accounts, subscriptions and projects are in scope
Scan	Code, secrets, dependencies, infrastructure as code and cloud, on a schedule, on push, on a new advisory, or on demand
Triage	An agent reads the code or configuration around each result, discards what is not exploitable, and writes one finding that states the real impact
Ask	When the answer depends on something only your organization knows, Amnify asks instead of guessing, and holds the finding back until you answer
Plan	A remediation plan you read, edit and approve
Fix	A pull request against your repository, or an assignment with a runbook when there is no code to change
Verify	The next scan confirms the fix and closes the finding. If it returns, the finding reopens

Who does what

Amnify, without asking

Scanning, triage, deduplication, severity, root cause linking, dependency monitoring, pull request review, drafting plans.

You, always

Answering a question, approving a plan, merging a pull request, authorizing a penetration test.

Amnify never pushes to your default branch and never merges its own pull requests. Your branch protections, required reviews and CI apply as they do for anyone else.