Dokima

Dokima provides always-on security review and vulnerability scanning for your code repositories. It maps your software architecture, learns how components interact and investigates security weaknesses across your application. Dokima checks and challenges its findings, giving developers clear evidence, potential impact and practical fix recommendations. Your team can discuss findings, add context and record decisions. As your code evolves, Dokima keeps reviewing, retaining its understanding of your codebase and revisiting relevant areas as changes emerge. Dokima works with Claude, OpenAI and private local models through OpenCode. It is free for small teams and open-source projects, including private repositories.