Unitone

Security remediation

Finding → Fix Spec → PR. We write a constrained change and open a reviewable pull request. We will not auto-merge, and this is not a public SKU.

Request a remediation POCTalk to us

Need SOC 2 or EU CRA programmes instead? UnitOne Compliance.

SCA, SAST, threat modeling, and compliance findings stacking in an ASPM triage queue and Jira backlog, with investigation, a fix spec, and a validated pull request still ahead.
AI industrialized discovery. Remediation capacity did not scale.

Findings wait in triage while investigation, a constrained Fix Spec, and a reviewable PR stay the bottleneck. That Finding → Fix Spec → PR path is the scoped work a remediation POC covers.

Intent Graph

Finding → reachable path → what must stay true → Fix Spec. The graph keeps developer intent attached as the pipeline walks the issue.

Animated Intent Graph lighting a CVE finding, reachable code, APIs and contracts, agent tools, must-stay-true constraints, then a Fix Spec.
Intent Graph loop: finding, code, APIs, and agent tools light as the pipeline walks what must stay true.

Finding

Name the issue in the repo, agent, or MCP server where it lives — the sink or tool, the reachable path, and the function it sits in.

Fix spec

Write what will change and what must stay true: API shape, which tool an agent may still call, tests to run, files that are out of scope.

Pull request

A focused diff that cites the finding and spec, runs existing CI, and stays inside the same review path as product work.

Multi-agent remediation pipeline in a terminal: intake, Intent Graph, skills, Fix Spec, reviewable pull request, and a human gate. No auto-merge.
Multi-agent pipeline; human review; no auto-merge.

Related resources

Frequently asked questions

What is a remediation POC?
A scoped engagement: we take a finding, write a fix spec that states what must not change, and open a pull request. We do not auto-merge patches.
Is this part of Gateway Free or Team?
No. Gateway is the self-serve product (Start free / Get Team). Remediation is a proof of concept, typically on Enterprise as a scoped engagement.
What do you need from us?
The repo, agent, or finding you want constrained, plus a reviewer who can approve a PR. Tell us what behavior must stay the same.

Request a remediation POC

Tell us the repo, agent, or finding you want constrained. Primary next step is a conversation — not Start free.