Every security scanner I've used has the same problem: the first run produces a wall of findings, half of them aren't real, and after a week nobody opens the report anymore. The scanner did its job. The humans gave up.

So I built OpenRouting . It runs proven open-source scanners on your repository, then has Claude, via Amazon Bedrock, review every finding before you see it: is this real or a likely false positive, how sure is it, what could go wrong, and what's the fix.

This post covers what it does today, what it deliberately doesn't do yet, and how the pricing works.

What a scan gives you

You sign in with Google or GitHub, connect a GitHub repository, and start a scan. Each finding in the dashboard comes with:

A verdict : real issue or likely false positive, with a confidence score.

A plain-English explanation of what could go wrong, written about your code, not a generic rule description.

A suggested fix : the corrected lines, in your language and style.

The reviewer that looked at it.…