> ## Documentation Index
> Fetch the complete documentation index at: https://docs.vulnzap.com/llms.txt
> Use this file to discover all available pages before exploring further.

# VulnZap Documentation

> Let agents code. We keep it safe. Real-time security scanning with merge-ready, minimal fixes.

## What is VulnZap?

Real-time scanning in the editor and full-repo checks with merge-ready, minimal fixes. Quiet, precise, production-grade.

VulnZap is built for how you ship—agent-aware scanning that understands prompts, tool output, and generated diffs. From inline editor detection to CI integration, all with OWASP-aligned guidance and ready-to-merge patches.

<Card title="Quick Start" icon="rocket" href="/quickstart" horizontal>
  Install and run your first scan in minutes
</Card>

## Key Features

<Columns cols={2}>
  <Card title="Multi-agent based Scanning" icon="robot">
    Specialized agents scan different aspects of your repositories so nothing goes unnoticed.
  </Card>

  <Card title="MCP Protocol Native" icon="plug">
    Seamless guardrails in Cursor, Cline, Windsurf with real-time protection
  </Card>

  <Card title="CI/CD Integration" icon="code-branch">
    Lightweight GitHub Actions block risky merges without slowing down pipelines
  </Card>

  <Card title="Wrapper lib for Devs" icon="users">
    Acess our APIs easily through our open-sourced **[vulnzap-lib](/integration/sdk)**
  </Card>
</Columns>

## How It Works

Install, connect, and scan in under five minutes.

<Steps>
  <Step title="Install and Authenticate">
    `npx vulnzap init` or `npm i -g vulnzap && npx vulnzap init`
  </Step>

  <Step title="Scan and fix">
    Your agent runs commit scans before pushing to remote.
  </Step>

  <Step title="Deploy">
    Merge clean diffs and keep CI fast
  </Step>
</Steps>

## Why VulnZap?

<CardGroup cols={3}>
  <Card title="Exploitability-First" icon="crosshairs">
    Focus on reachability and real-world impact, not theoretical issues
  </Card>

  <Card title="Deterministic Patches" icon="code-merge">
    Context-aware, style-safe fixes that minimize churn
  </Card>

  <Card title="Low Noise, Strong Signal" icon="signal-bars">
    Designed for developer velocity with close to 0 false positives
  </Card>
</CardGroup>

## Security & Privacy

<AccordionGroup>
  <Accordion title="Zero Data Retention">
    Source code is never persisted by default.
  </Accordion>

  <Accordion title="Deployment Options">
    Choose VulnZap cloud, your own VPC, or fully on-premises deployment.
  </Accordion>

  <Accordion title="SOC 2 Compliance">
    SOC 2 controls, region-based processing, and audit packs available under NDA.
  </Accordion>
</AccordionGroup>

## Get Started

<CardGroup cols={2}>
  <Card title="Quick Start Guide" icon="play" href="/quickstart">
    Install and run your first scan in minutes
  </Card>

  <Card title="Dashboard Overview" icon="chart-line" href="/features/dashboard">
    Explore the VulnZap dashboard and core features
  </Card>

  <Card title="IDE Integration" icon="code" href="/features/ide-integration">
    Set up MCP protocol in Cursor, Windsurf, or Cline
  </Card>

  <Card title="API Reference" icon="terminal" href="/api-reference/introduction">
    Integrate VulnZap programmatically
  </Card>
</CardGroup>