The product

Two things, sold as one: the scan, and the portal.

The scan proves. The Reporting & Analytics Portal is where proven risk is reviewed, quantified, remediated, and reported to the board — for every defender, developer and decision-maker.

01 · THE SCAN

LLM-driven discovery on any framework

Custom and CQRS stacks that pattern-based tools miss. Frontier models reason about the code as written, then hand every candidate to the governed pipeline.

02 · THE PIPELINE

Signed gates A–H, negative controls, refusals

Sanitise → map → source-to-sink → negative control → impact → readiness. Each gate is Ed25519-signed; what can’t survive is refused, not softened.

03 · THE PORTAL

One IA, three tiers

Developer, defender, decision-maker behind one navigation — registry, case dossier, analytics, reports — each reader lands on their view. This is what people renew for.

04 · THE RECORD

Evidence-grade telemetry

Every model trajectory captured, every gate decision signed and append-only. Full auditability: a chain of custody you can hand to a regulator.

05 · THE ECONOMICS

Runs on a subscription — no per-token cost

Bring your Codex or Claude subscription; the scanner runs discovery at no per-token cost. Or self-host a model. The value is the evidence, not the API bill.

06 · THE BOUNDARY

Single-tenant private cloud

Deploy in your own cloud subscription. No code leaves the customer boundary — air-gap-friendly, SSO/Entra ID, versioned releases with an upgrade path.

Two delivery models

Same product, same evidence. The difference is the trust boundary.

Quaestor Cloud

SaaS · multi-tenant · instant
Runs
Quaestor-hosted, per-workspace isolation
Auth
Email + SSO (SAML / OIDC)
Models
Managed backends, or bring-your-own subscription
Deploy
Sign up, connect a repo, first proven case in minutes
Best for
Startups → mid-market; dev-led adoption

Quaestor Private

On-prem · single-tenant · your cloud
Runs
Your own cloud subscription (Azure first)
Data
No code leaves the customer boundary
Auth
SSO / Entra ID; air-gap-friendly
Deploy
Helm / Terraform / Docker Compose; versioned GHCR releases
Best for
Regulated enterprise — fin / gov / health, data residency

See it on your own code.

A scan produces a complete signed dossier — the dossier is the demo.