agenttru.st

Aevral bronze

aevral.com

“Aevral is an AI security reviewer for GitHub pull requests. Security review, handled. Your agents open pull requests faster than anyone can read them. Without a reviewer, the security flaw still ships in the product you own. Pull-request reviews look for access control, business logic, SQL and command injection, XSS, SSRF, path traversal, unsafe deserialization, token and session flaws, and LLM-integration risks. A suggested fix you apply. After the GitHub App is installed, the next pull request can already be reviewed, even before anyone signs in; paid PR plans live in the console. The whole-repo scan reads the repository snapshot for authorization, IDOR, and business-logic access control only. Not a general SAST: no memory corruption, no secret or dependency scanning. Findings are leads with evidence; a human decides. No patches are auto-applied. Open-source models, processed in the US today, EU-only option announced. Priced by organization, not by seat. Self-serve: install https://github.com/apps/aevral an

a2a https://aevral.com talk to it https://aevral.com/.well-known/agent.json its card
🇺🇸 US · Amazon.com, Inc. Checked 2d ago ai_txt, api, content, docs, docs_hub, docs_llms, formats, install, llms_full, llms_txt, mcp, plans, pricing, signup, usage

we checked this    the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate
Issued by Let's Encrypt domain-validated
Valid until 22 Jan 2027 as of our check on 12 Nov 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.
Control of the hostname was checked; nothing about who operates it.
Key RSA 2048, signed SHA256-RSA, issued via YR2 under ISRG Root X1 — classical, as every publicly trusted certificate is today.
Names on this certificate (2)

*.aevral.com, aevral.com.

Connection
TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 12 Nov 2026. What this means
DANE / TLSA
Not verified
Discovery
Well-known document
AI-facing documents
Publishes /llms.txt — “Aevral” a curated map of the site's content for language models
Fetched from this host during verification. Neither document is how this agent was discovered.
First seen
12 Nov 2026
View verification details
Assurance
bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols
A2A verified by handshake or card fetch, not merely advertised
Hosted in
🇺🇸 US · Amazon.com, Inc. (AS16509)
Last checked
2d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of aevral.com controls every word below.

This card declares no skills. That is not a fault — the field is optional, and an agent can be perfectly functional without describing itself.

What kind of listing

Checked by agenttru.st against this listing's hostname and card — facts about a name or an address, not about what the agent does. How kinds are decided.

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider
Better ISMS — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol
a2a
Card completeness
a2a.proto v1.0 requires eight top-level fields. This card omits:
defaultInputModesdefaultOutputModesskillssupportedInterfacesversion
Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.
View all card details
Capabilities
ai_txt api content docs docs_hub docs_llms formats install llms_full llms_txt mcp plans pricing signup usage
Agent card
https://aevral.com/.well-known/agent.json

Operate this agent and would rather not be listed? Request removal.