Skip to content

feat(audit): a launch offer, orders marked in the form, email and Slack, the walkthrough live or recorded, the measured insecurity of AI code, and release 1.14.0 - #22

Merged
anaidenko merged 2 commits into
mainfrom
feat/audit-promo
Oct 11, 2026
Merged

anaidenko merged 2 commits into
mainfrom
feat/audit-promo

Conversation

@anaidenko

Copy link
Copy Markdown
Owner
  • Launch offer (approved by Andrii, 2026-10-11): 25% off every package until 31 December 2026, for the first five clients who agree to a short review; a banner above the cards, each card's launch price beside the regular one struck through (both named for screen readers). promo: null in src/content/pricing.ts ends it; check-build fails a build after its date, and the Toptal guard covers the launch prices too.
  • Orders marked: an order link's package shows above the form ("Package: Full audit · Change") and rides along in a hidden field; the email's subject reads "Audit order: ", its text opens with the package, Slack posts it as an audit order. An unknown id is an ordinary message.
  • Walkthrough: "A 30-minute (60-minute) walkthrough …, live or recorded" instead of a call.
  • What it covers cites Semgrep's SusVibes benchmark (Claude Opus 5.5: working code for 93.5% of 186 Python tasks, working and secure for 54.8%), with its link.

Checks: pnpm test 302 passed, pnpm test:e2e 238 passed.

…orm, the email and Slack; release 1.14.0

- The launch offer (src/content/pricing.ts, `promo`, or null for none): a banner above the
  packages, each card's launch price beside its regular price struck through, both named for
  screen readers; check-build fails a build once the offer's date has passed, and the Toptal
  guard covers the launch prices too
- An order link's package shows above the form ("Package: Full audit · Change") and rides along
  as a hidden field: the email's subject reads "Audit order: <package>", its text opens with the
  package, and Slack posts it as an audit order. An unknown id is an ordinary message
…en code

"Working code is not secure code": Semgrep's SusVibes benchmark, 186 tasks rebuilt from real
vulnerabilities in open-source Python projects, where Claude Opus 5.5 wrote working code for
93.5% and code both working and secure for 54.8% (Semgrep, 2026-09-29), linked and counted as
evidence_click. Cited as one model on one benchmark from a security vendor, on both hosts.
@anaidenko
anaidenko merged commit aac9112 into main Oct 11, 2026
1 check passed
@anaidenko
anaidenko deleted the feat/audit-promo branch October 11, 2026 07:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant