CheckOps home

Tools directory

A

CheckOps

ArgusRed

ArgusRed, by model lab Cosine, reads your code like an attacker, tries each suspected flaw in an isolated sandbox and reports only exploits it could reproduce, with a fix.

Visit website

Latest public signals

Not refreshed yet. Refresh reads the public site and, when the entry has a GitHub repository, the latest release.

Visit Website

Introduction

ArgusRed reads your code the way an attacker does, then tries the door. Suspected issues are reproduced in an isolated sandbox, and you receive only the exploits it could actually reproduce, each with a fix.

It is built by Cosine, which describes itself as a model lab rather than a wrapper, and runs in the EU. Its Show HN post described post-training a model that pentests instead of refusing.

Because the fee is refunded when nothing exploitable is confirmed, ArgusRed is an easy way to sanity-check a repository before a launch or a funding round. Treat a clean result as one signal among several rather than a guarantee, and keep static analysis and dependency checks in CI alongside it.

Launch and background: ArgusRed was posted to Hacker News as a Show HN on 20 June 2026.

Features

  1. Code-reading attacker: Finds candidate flaws in source.
  2. Sandbox reproduction: Confirms exploits safely.
  3. Proof-only reports: No unproven maybes.
  4. Fixes included: Remediation with each finding.
  5. EU hosting: Runs in the EU.

Pros

  1. Refund guarantee: $100 refunded unless a real exploit is confirmed.

Cons

  1. Repo access needed: White-box only.
  2. New product: 2026 launch.
  1. Connect a repository.
  2. Pay the $100 scan fee.
  3. Review reproduced exploits and fixes.

Resources:

Pricing

ArgusRed charges $100 after you connect a repository, fully refunded unless it confirms a real exploit.

  1. Small teams wanting a cheap, proof-only code security check.

Conclusion

ArgusRed’s pay-only-if-exploitable model is an unusual and confident offer.

Run it on a repo with known past issues to calibrate.

On CheckOps, ArgusRed is filed under the Security testing stage. Related tools listed here include Semgrep, Snyk, CodeQL, Aikido Security, Checkmarx and Bearer CLI. Which one fits best depends mostly on your stack, your team’s size and skills, and whether you prefer to run tools yourself or pay for a managed service. This page reflects the official website, documentation and repository as they stood on 11 November 2026.

Alternatives

Other tools on CheckOps that cover similar ground. Open a page, or compare one with ArgusRed side by side.