Status
We build it with it
Graphlit is production-ready and we are inviting users now — signup is open. It is built with itself: its architecture is drawn in it, its own code is checked against that drawing, its own scanner is pointed at its own source. Here is what works, what doesn't yet, and why our own codebase is the hardest test we run.
The hardest test we run
This product is built using this product
Its own architecture is drawn in it, its own code is checked against that drawing, and its own security scanner is pointed at its own source.
Zero findings against ourselves, enforced
A test fails the build if our scanner reports a single error on our own code.
Our drift check runs on our repo
The same report you would get. If it breaks, we find out first.
Every claim on this site is a command
Nothing here is a number we cannot re-run.
A scanner that cannot survive being pointed at itself is not a scanner. Ours has to pass that before anything ships.
Five nodes claim a file in this repo.
Press Check sync to hash every one of them against the code that is actually on disk right now.
A built app runs, but only where you are. There is no URL to send anyone yet.
Everything else on this page is real, works today, and needs no invite. You should hear the gap here, not in week two.
Where it stands
Marked honestly
Import an existing codebase
works todayFolder, git URL or upload — the typed graph comes out either way.
Drift detection
works todayEvery mapped file is content-hashed and re-checked. This is the part we lean on.
Architecture contracts
works todayDeclare what may talk to what; a violation fails instead of being noticed later.
Health and security audit
works todayDeterministic defect scan plus a platform-keyed rule catalogue.
Scoped agent builds
works todayA task names its files. An edit outside them fails the run.
Command line + CI
works todayScan locally, exit non-zero on findings, annotate a pull request.
Accounts and teams
works todaySign-in, organisation scoping, four roles enforced by the API, and a people screen.
A drawing becoming a running app
works todayPlan, scaffold, build, then boot it and open it in the browser.
Build on your own machine
works todayInstall the client, run the runner in your project, and Execute on the board builds right there — in your repo, as you, with your own coding agent. Nothing but the plan leaves your machine.
Payments and plans
works todayLive billing — Free, Pro and Team, card or UPI, with invoices.
Bring your own model key
works todayStore your own provider key and it answers first, on your bill, on any plan. Pick a different model for judgement and for bulk work.
Off-machine backups
works todayThe database and every workspace are copied to object storage, nightly and on demand. A lost machine is not lost data.
A link you can send someone
not yetThe preview URL is ours and ephemeral. A durable address for a built app does not exist yet.
Principles
Four rules we haven't broken yet
Findings are hypotheses
Every one ships with how it could be wrong. We never report a raw count as bugs found.
Deterministic wherever possible
If a check can be ordinary code rather than a model, it is — same input, same answer.
Your code stays yours
Export at any time. Most of the product never sends your source to a model at all.
We say what doesn't work
This page exists so you find the gaps here, not in week two.
Watch it get built
This page is the real changelog, breakages included. Nothing here is waiting on an invite.
Free to start. Import a repo and the graph is there in minutes.