Leonidus: Security & Compliance | Pisteyo Innovation Labs

The Platform

Source to evidence, in one workflow

Leonidus consolidates source review, dependency analysis, and severity prioritization into the release path — a Vanta-class posture platform without the enterprise price tag. Every module feeds one workflow: scan, prioritize, prove.

Source Intake

Connect a GitHub repository for repeatable scans tied to live code, or upload a ZIP when access is limited or client-managed.

Start here

Control Library

Apply HIPAA, HITECH, SOC 2, FedRAMP, and HITRUST controls — 167 frameworks in all — plus your own client-specific controls.

167 frameworks

AI Analysis

Finds vulnerable libraries, dependency risk, and the gaps AI-generated code leaves behind — the failure modes scanners miss.

Severity Model

Every finding ranked Critical, High, Medium, or Informational, so urgent fixes separate cleanly from the watch list.

Pre-Deployment Gate

One API call returns a pass or block verdict against your policy — wired directly into CI/CD before code reaches production.

CI/CD

GitHub PR Scanning

Webhook-triggered scans on every pull request, with ranked results posted back as PR comments where engineers already work.

URL Pen-Testing

Assess running applications for TLS posture, security headers, and exposed endpoints — not just the source, the live surface.

Evidence Export

Audit-ready summaries and detailed findings with control notes — proof your buyers and auditors can actually read.

API + MCP Server

Run scans from CI, the terminal, Claude Code, and Cursor. Leonidus meets your engineers inside the tools they already use.

MCP

One Workflow

Scan. Prioritize. Prove.

Point it at your code. Get findings, ranked, with the proof attached.

Leonidus explains what is wrong, separates urgent fixes from watch items, and gates the release against your policy — then hands you an evidence pack stakeholders can sign off on. Move from scan to proof in one pass.

you › scan github.com/acme/api against SOC 2 + HIPAA

leonidus › 1,204 files, 38 dependencies. 4 Critical, 11 High, 22 Medium.

[ top finding · hardcoded secret · src/config.ts:42 ]

you › gate the release

leonidus › BLOCK — 4 Critical exceed policy. Evidence pack exported.

Under the Hood

Enterprise posture, without the enterprise overhead

300+ security & compliance standardsSource review, dependency analysis, and control mapping in a single pass.

Severity that means somethingCritical, High, Medium, and Informational — ranked so you fix what matters first.

Pre-deployment gateA single API call returns pass or block against policy, before code ships.

GitHub PR scanningWebhook-triggered scans on every pull request, commented inline.

Scheduled scansCron-style scheduling per repo or URL, with change-only notifications.

API + MCP serverRun scans from CI, the terminal, Claude Code, and Cursor.

Multi-workspace orgsOne organization, many client workspaces — built for MSSPs and consultancies.

Evidence buyers understandExport summaries and detailed findings for auditors and stakeholders.

The Innovation Lab Model

From co-build to live venture

Leonidus is what the Pisteyo Innovation Lab produces: a real product, co-built and co-invested, now scanning production code for security teams and consultancies. Four steps take you from a raw repo to evidence a stakeholder can sign.

Add code sourceConnect GitHub or upload a ZIP when access is limited.

Select control frameworkChoose the frameworks and client controls that apply.

Review ranked findingsLeonidus explains each issue and separates urgent fixes from watch items.

Export evidence packageShare summaries, detailed findings, and control notes with stakeholders.

Leonidus

See Leonidus on your codebase

Point it at one repo and one framework. We'll show you the findings, the severity ranking, and the evidence pack — before your next release.

Book a Demo About the Innovation Lab

Security & compliance, in one platform.