NoxauditNoxaudit
Noxaudit

Your codebase,
audited every night.

Noxaudit runs deep, focused AI audits overnight — when your code is idle and provider batch pricing cuts costs in half. Each night covers a different focus area. By the end of the week, your entire codebase has been reviewed across security, testing, dependencies, patterns, performance, docs, and hygiene.

Open source (MIT)·Pennies per audit with batch pricing·7 focus areas, 10+ models benchmarked

Overnight audits, half the cost

Code audits don't need real-time responses. Noxaudit submits jobs through OpenAI, Anthropic, and Google batch endpoints — 50% cheaper than synchronous calls, with higher rate limits. Results land in your dashboard by morning.

50%

Cost reduction

OpenAI, Anthropic, and Google all offer batch endpoints at half the cost of synchronous calls.

$0.01–0.05

Per nightly audit

Cost scales with repo size. A typical daily scan with gpt-5-mini runs one to five cents. Deep dives with larger models run weekly or monthly.

0

Developer interruptions

Audits run while you sleep. No CI gates, no PR blockers. Review findings on your schedule.

7 focus areas, one per night

Each focus area has a deep, specialized prompt that goes far beyond “scan for issues.” Security traces auth flows. Testing suggests specific test cases. Dependencies checks CVEs. Each night rotates to the next area — by Sunday, you have full coverage.

MonSecurity
TueTesting
WedDependencies
ThuPatterns
FriPerformance
SatDocs
SunHygiene

Security

Trace data flow from input to output, identify auth bypass paths, check for OWASP top 10, analyze session and token handling.

Testing

Analyze actual coverage gaps, suggest specific test cases with inputs and outputs, identify untested edge cases and critical paths.

Dependencies

Cross-reference against known CVEs, check license compatibility, identify abandoned or unmaintained packages, flag unused deps.

Patterns

Check for architectural consistency across modules, identify code that violates the project's own conventions and patterns.

Performance

Identify N+1 queries, missing indexes, hot loops, unbounded allocations, missing caching opportunities.

Docs

Diff README and docstrings against actual function signatures, find stale examples, identify undocumented public APIs.

Hygiene

Map dead code paths, find unused exports and imports, identify copy-paste duplication, flag orphaned config files.

How it works

Noxaudit is an open-source CLI that runs locally or as a managed service. The platform adds scheduling, a dashboard, and team collaboration.

OSS CLI + MCP server

Install with pip install noxaudit and run against any repo. The built-in MCP server connects to Claude Code, Cursor, or any MCP-compatible editor — query findings, run audits, and manage decisions without leaving your IDE.

View on GitHub →

Managed platform

Connect your repos via GitHub App. The platform schedules nightly audits, rotates focus areas, tracks findings across runs, and builds health scores over time. We use our API keys — you just review the results.

Join the waitlist →

Decision memory

Accept, dismiss, or mark findings as intentional. Noxaudit remembers your decisions so the same finding never resurfaces — unless the underlying file changes or 90 days pass.

Confidence scoring

Findings seen across multiple runs and multiple models get higher confidence scores. One-off findings from a single model are flagged as low confidence. You decide what matters.

Benchmarked across 10 models

We ran every supported model against real repos and measured what they actually find, what they agree on, and what they cost. Costs shown are for the benchmark repos — your costs will vary based on repo size. The results drive our tier defaults.

ModelFindingsCostConsensusTier
gpt-5-mini39$0.035/6Daily
gpt-5.484$0.265/6Deep dive
claude-sonnet-4-678$0.386/6
claude-opus-4-691$0.656/6Premium

Daily scans use gpt-5-mini. Weekly deep dives use gpt-5.4. Monthly premium audits use opus. Cost scales with repo size — all via provider batch endpoints at 50% off standard rates.

See full benchmark results →

Start auditing for pennies a night

Noxaudit runs while you sleep. By morning, you have a fresh audit — security holes found, dead code mapped, docs checked against reality. Cost scales with your repo, not a flat fee.

Or install the CLI now: pip install noxaudit