ARCH: RUST_NATIVE
v0.20.0Online

Find vulnerabilities in milliseconds, not minutes. The only static analysis engine designed for monorepo scale with zero configuration.

Rust Native
Memory safe & blazingly fast
28 Languages
Full polyglot support
647+ Rules
OWASP Top 10
Taint Analysis
Cross-file flows
rma scan --watch
SCANNING
1
fn process_query(input: String) {
2
// Validate and execute user query
3
let query = format!("SELECT ... id = '{}'", input);
4
let res = sqlx::query(&query)
5
.fetch_one(&db).await?;
6
}
rustc 1.76.0sqlx 0.7.3
scanning
1.2ms
Scan Time
0
False Positives

Securing your entire stack with language-native precision

Rust
TypeScript
Go
Python
C++
Java
C#
JavaScript
PHP
Ruby
Swift
Kotlin
Docker
Kubernetes
Terraform
Bash
Rust
TypeScript
Go
Python
C++
Java
C#
JavaScript
PHP
Ruby
Swift
Kotlin
Docker
Kubernetes
Terraform
Bash
Live Remote Uplink

Interface directly with the core.

Full-featured TUI for power users. No web bloat, just raw performance.

RECUPLINK: SECURE (SSH-2.0)
FPS: 60 // PING: 12ms
FINDINGS
➜ ~
rma view --findings
Verifiable Security

RMA generates a proof path across files with context-aware sinks and fix guidance. Don't guess where the vulnerability is—see the math.

Trace Boundaries

Cross-module data flow analysis.

Context Evidence

Exact source lines & variable states.

Verified Fixes

Automated patch verification.

rma verify --target=src/
// Tracing data flow from source to sink...
User Inputsrc/api.rs:45
req.query.get('id')
Validation Checksrc/utils.rs:12
if id.is_empty() { return }
SQL Executionsrc/db.rs:88
format!('SELECT ... {}', id)
Active Threat
Step:
Performance Profile

Architectural Superiority

Built on Rust and Rayon for massive parallelism. Zero JVM overhead. Sub-minute scans at monorepo scale.

SpeedPrecisionDepthContextDX
Qryon
Linters
Legacy SAST
sys_diag --benchmark --threads=all
Processing
Architecture:Rust Native (x86/ARM)
Parallelism:Rayon Worker Pool (Automatic)
Initializing...
45 GB/s
Throughput
Rayon Multi-threading
< 1%
False Positives
Context-Aware Analysis
150MB
Memory Efficiency
No JVM Overhead
Global
Context Depth
Cross-module Taint
Access Control

Mission Ready.

Deploy Qryon from local workstations to air-gapped defense networks.

Systems Operational
v0.20.1

Solo

Free

Local engine for individual security researchers.

CLI Scanning
VS Code Ext
SARIF Export
Community Rules

Team

Rec
$49/mo

Centralized command for engineering squads.

Cloud-Hosted Dashboard
PR Decoration
Team Analytics
SSO (Google/GitHub)

Enterprise

Custom

On-premise deployment for regulated environments.

Self-Hosted / Air-Gapped
Audit Logs
SAML / OIDC
Dedicated Instance
The Future of Code Security

Development Pipeline

A continuous integration of advanced analysis capabilities. One unified flow.

Released

The Graph Analysis Engine

v0.20.1

Introduces a new graph-based analysis engine for deeper context awareness and cross-file taint tracking.

Technical Detail

Rewrote core analyzer to use petgraph. 40% performance boost on large monorepos.

  • Graph-based Taint Analysis
  • Incremental Scanning
  • JSON & SARIF Export
In Progress

Proof Mode & Auto-Fix

v0.21.0

Generates cryptographic proofs for vulnerability paths and automated remediation patches.

Technical Detail

Integrating tree-sitter for AST-based code rewriting and patch generation.

  • Automated Fix Suggestions
  • Verify Proof Generation
  • IDE Extension (VSCode)
Planned

Enterprise Governance

v1.0.0

Full suite of governance tools including policy enforcement, SSO, and audit logs.

Technical Detail

WASM-based policy execution environment for custom rule definitions.

  • Custom Policy Engine
  • SSO (OIDC/SAML)
  • RBAC & Audit Logs
Quick Start

Ready to secure your
codebase?

Get started in seconds with our cross-platform CLI. No registration required for local scanning.

macOS, Linux, and Windows support
Single binary, no dependencies
CI/CD integration ready
install-rma — -zsh — 80x24
# Recommended for macOS/Linux
$brew install rma