AvailableGitHub
Install the GitHub App on the repositories you choose. Audits read the code, pull request review runs on each change, and patches arrive as pull requests.
- GitHub App
- Repositories
- Pull requests
- Patches
Integrations
Findings land where your engineers already work.
Connect source control, pipelines, tickets, chat, and AI editors. winfunc reviews the repositories you select, reports where your team decides, and proposes every fix as a pull request.
- Integrations
- 14
- Categories
- 4
- Available now
- All
winfunc4 integrations01
Source control
Connect the repositories you want reviewed. winfunc reads the code you select and brings findings and proposed fixes back into review.
AvailableAvailableGitLab
Bring GitLab repositories into audits and review merge requests before they land.
- Repositories
- Merge requests
AvailableBitbucket
Connect Bitbucket repositories for audits and ongoing security review.
- Repositories
AvailableAzure DevOps
Review code in Azure Repos and run winfunc from Azure Pipelines.
- Azure Repos
- Azure Pipelines
3 integrations02
CI/CD
Run security review as a step in the pipelines your team already maintains.
AvailableGitHub Actions
Add winfunc-action to a workflow to run security review inside GitHub Actions.
- winfunc-action
- Workflows
AvailableJenkins
Run winfunc review as a stage in your Jenkins pipelines.
- Pipelines
AvailableCircleCI
Run winfunc review as a step in your CircleCI workflows.
- Workflows
3 integrations03
Tickets and alerts
Reviewed findings reach the people who fix them, in the tools they already watch.
AvailableJira
Create Jira issues from reviewed findings so remediation is tracked alongside the rest of engineering work.
- Issues from findings
AvailableSlack
Send scan and finding alerts to the channels your team already follows.
- Scan alerts
- Finding alerts
AvailableMicrosoft Teams
Post notifications and scan summaries to Microsoft Teams channels.
- Notifications
- Summaries
4 integrations04
AI editors
Winfunc MCP brings snippet, file, and change review into Model Context Protocol clients, so engineers can ask security questions while the context is fresh.
Winfunc MCPAvailableCursor
Use Winfunc MCP from Cursor to request snippet, change, and codebase security analysis.
- Winfunc MCP
AvailableClaude Desktop
Connect Claude Desktop to the Winfunc MCP tools for security questions and code review.
- Winfunc MCP
AvailableWindsurf
Use the Winfunc MCP server from Windsurf to investigate code while you work.
- Winfunc MCP
AvailableCline (VS Code)
Give Cline access to Winfunc MCP tools for scoped security analysis inside VS Code.
- Winfunc MCP
Access model
Least privilege, by default.
Every connection is scoped to the work you ask for. Security teams can review exactly what winfunc touches before the first scan.
- 01
Only what you select
winfunc reads the repositories you choose and nothing else in the organization.
- 02
Proposes, never merges
Fixes arrive as pull requests. winfunc never merges to protected branches.
- 03
Revocable keys
API and MCP keys are stored only as SHA-256 hashes and can be revoked at any time.
- 04
Zero data retention
Code is analyzed in ephemeral workspaces and deleted after each scan. Only findings are kept.
Bring your workflow
Confirm the connections
your team needs.
We'll review your repositories, pipelines, and editor setup, then show winfunc running where your engineers already work.