Pyx Get started

Alice can’t open
Bob’s invoice.

Pyx checks it before every release.

Get started
Every row says 200 OK. Look closer.

Leaks look like success.

GET /api/invoices/inv_b as Alice
200 OK { "invoice": null }
Denied
GET /api/invoices/inv_b as Alice
200 OK { "owner": "bob", "total": 3400 }
Leaked

Every door. Not just the table.

Database API/rest/v1/invoicesRow rules apply
RPC functions/rest/v1/rpc/get_invoiceCan skip them
Your API routes/api/invoices/:idCan skip them

See who gained access.

On every pull request.

invoice-portal

Release 42

Blocked
  • Alice can now open Bob’s invoice/api/invoices/:id
  • Bob can now open Alice’s invoice/api/invoices/:id
  • Database and RPC unchanged/rest/v1

Tested on real leaks.

8/8
seeded leaks caught
7/7
broken setups stopped
1
miss, published

See every run

Nothing to take on faith.

No production accessSynthetic data only Every request loggedSee the ledger Verify any resultIn your browser Source availableRead every line

Reports your client can read.

Open a sample

Pyx report showing two users who gained access through an API route

Simple pricing.

Setup

$490

once

  • Up to three tables
  • Every door checked
  • Live in three days
Book a setup

Release review

$99

per app, monthly

  • Every release reviewed
  • Failures triaged in a day
  • Repro pack per failure
Start

Agency

$299

monthly

  • Five client apps
  • Your brand on reports
  • Half-price setups
Talk to us

First three setups half price. The CLI is free.

Ship without guessing.

Get started