Install

Granska ships as a Claude Code plugin:

claude plugin install granska@granska

Run your first audit

From inside Claude Code, point it at any target — a local folder, a GitHub repo, or a live URL:

/audit .

Granska runs a real scanner battery first (semgrep, gitleaks, trivy, osv-scanner and more) as ground truth, fans the findings out to independent LLM review lanes, adversarially verifies every high-severity finding, and renders a self-contained report.html plus report.json — no server, no account, nothing phones home.

Re-audit an existing target

/audit . --scope quick

Subsequent runs diff against the last one: new / fixed / regressed / unchanged findings, plus a consolidated A–F grade and trend chart. Waivers live in .granska/baseline.yml and re-surface when they expire.

CI mode

Run the same audit headlessly on every pull request via the published GitHub Action — see CI setup for the full workflow.

Everything above is free

Detection, adversarial verification, fixing, re-audit, and CI mode are all free and open (Apache-2.0) — see pricing for what Pro adds.