- Home
- Infrastructure as Code Security Software
- Winfunc Infrastructure Scanner
On the recordRead 21 Oct 202648 facts
Winfunc Infrastructure Scanner
Plans and prices
One-time
$500one-time
one surface or deep scan · findings workspace and report · prioritized findings · suggested remediation
Read 21 Oct 2026 · winfunc.com
Enterprise
Priced on request
customer-controlled hosting · isolated tenants · bring-your-own model keys · organization policies
Read 21 Oct 2026 · winfunc.com
Pay as you go
Priced on request
incremental, scheduled and pull-request review · reproduction evidence where feasible · patch pull requests · AI triage
Read 21 Oct 2026 · winfunc.com
Recurring
Priced on request
everything in Pay as you go · allowance renews monthly · reconciled usage per scan
Read 21 Oct 2026 · winfunc.com
On the record
- Access model
- The web security console is invite-only and requires signing in with an invited GitHub account.app.winfunc.com · read 21 Oct 2026
- API and keys
- Enterprise documentation says API and MCP keys are stored as SHA-256 hashes and can be revoked.winfunc.com · read 21 Oct 2026
- Cloud analysis
- Reviews cloud IAM policies, detects network exposure and storage misconfigurations, and checks for drift between declared infrastructure and actual cloud state.winfunc.com · read 7 Oct 2026
- Cloud integrations
- Cloud-provider API connections provide real-time posture assessment for AWS, GCP and Azure.winfunc.com · read 21 Oct 2026
- Cloud posture
- Continuous cloud assessment compares environments with CIS benchmarks and detects drift from declared infrastructure.winfunc.com · read 21 Oct 2026
- Cloud providers
- Maps CIS Benchmark compliance for AWS, GCP, and Azure and uses cloud provider APIs for real-time posture assessment.winfunc.com · read 7 Oct 2026
- Code retention
- The Trust Center says source code is processed in memory and discarded after analysis, retaining only finding metadata.winfunc.com · read 7 Oct 2026
- Company backing
- The maker says it is backed by Y Combinator's Summer 2024 batch.winfunc.com · read 21 Oct 2026
- Company founding
- Stition, Inc. was incorporated in Delaware in 2024.winfunc.com · read 21 Oct 2026
- Compliance frameworks
- Maps findings to CIS, SOC 2, ISO 27001, PCI DSS, and HIPAA and offers audit-ready reports with evidence and remediation guidance.winfunc.com · read 7 Oct 2026
- Compliance mapping
- Findings can be mapped to CIS, SOC 2, ISO 27001, PCI DSS and HIPAA with evidence-based reports.winfunc.com · read 21 Oct 2026
- Containers
- Scans Dockerfiles and container images for known CVEs, misconfigured permissions, and insecure base images, with CI pre-deploy gates.winfunc.com · read 7 Oct 2026
- Container scanning
- Dockerfiles and Docker images are checked for CVEs, permission problems and insecure base images.winfunc.com · read 21 Oct 2026
- Data retention
- The security terms state that source code is analyzed in ephemeral workspaces and deleted after each scan while findings are retained.winfunc.com · read 21 Oct 2026
- Deployment
- The Trust Center describes self-hosted deployment on premises or in a private cloud, with data remaining within the customer’s perimeter.winfunc.com · read 7 Oct 2026
- Documentation depth
- Product pages link to documentation, but no public API or SDK reference with endpoint details is presented on the reviewed pages.winfunc.com · read 21 Oct 2026
- Hypothesis scans
- A hypothesis scan turns a bounded security question into a repository-scoped investigation with traces, supporting evidence, conclusions and limitations.winfunc.com · read 21 Oct 2026
- IaC support
- The infrastructure scanner supports Terraform, CloudFormation and Pulumi templates.winfunc.com · read 21 Oct 2026
