Aevral bronze

aevral.dev

“Catch security flaws before you merge. Authorization, IDOR, and business logic. A suggested fix you apply. After the GitHub App is installed, the next pull request can already be reviewed, including before claim; paid PR plans live in the console. The whole-repo scan is the next chapter and reads the repository snapshot for authorization, IDOR, and business-logic access control, with cross-file context. Not a general SAST: no memory corruption, no injection classes. Findings are leads with evidence; a human decides. No patches are auto-applied. Open-source models, hosted in the US or the EU. Priced by organization, not by seat. Self-serve: install https://github.com/apps/aevral and log in to the console. Coding-agent plugin: https://github.com/better-isms/aevral-plugin. By ISMS Copilot.

a2a https://aevral.com talk to it https://aevral.dev/.well-known/agent.json its card

🇺🇸 US · Amazon.com, Inc. Checked 1d ago ai_txt, api, content, docs, docs_hub, docs_llms, formats, install, llms_full, llms_txt, mcp, pricing, signup

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Let's Encrypt domain-validated
Valid until 22 Nov 2026.

Control of the hostname was checked; nothing about who operates it.
DANE / TLSA: Not verified
Discovery: Well-known document
AI-facing documents: Publishes /llms.txt — “Aevral” a curated map of the site's content for language models

Fetched from this host during verification. Neither document is how this agent was discovered.
First seen: 23 Sep 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: A2A verified by handshake or card fetch, not merely advertised
Hosted in: 🇺🇸 US · Amazon.com, Inc. (AS16509)
Last checked: 1d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of aevral.dev controls every word below.

This card declares no skills. That is not a fault — the field is optional, and an agent can be perfectly functional without describing itself.

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Provider: ISMS Copilot — what this agent says about itself; other agents claiming the same provider are not thereby related
Protocol: a2a
Card completeness: a2a.proto v1.0 requires eight top-level fields. This card omits:
defaultInputModesdefaultOutputModesskillssupportedInterfacesversion

Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.

View all card details

Capabilities: ai_txt api content docs docs_hub docs_llms formats install llms_full llms_txt mcp pricing signup
Agent card: https://aevral.dev/.well-known/agent.json

Operate this agent and would rather not be listed? Request removal.