Quickstart

Run apPosture in your own environment - in about 10 minutes

No sales call needed to look. Because apPosture is self-hosted, you can stand up the full platform with Docker Compose and run a real scan on your own app, entirely inside your infrastructure.

Get the distribution →Read the docs
No egress after image pull · Local LLM · Your data never leaves
Four steps

From zero to a proven finding

01Check the prerequisites

A Linux host (or WSL2) with Docker and Docker Compose, 8 GB RAM free for the scanners and the local model. No outbound internet is required after the images are pulled.

02Get apPosture and start the stack

One command brings up the whole platform - database, queue, scan engines, AI and API - in your own environment. Nothing phones home.

$ git clone <your apPosture distribution> && cd apposture $ docker compose up -d # API on :8000 · UI on :3000 · scan engines run container-to-container

03Pull the local model once

Analysis runs on a local LLM, so your code is never sent to a vendor. Pull the model a single time; after that the platform is fully offline.

$ ./apposture pull-model # the only network step - and it is optional if you air-gap the image

04Add a target and run the first scan

Open the dashboard, add an application URL or connect a repository, and start a scan. The pipeline runs discovery, active testing, template checks and local-LLM triage end to end.

open http://localhost:3000 # add a target → Scan → watch proven findings, an attack chain and the CI gate verdict
Prefer to see it first?

Watch it prove a breach before you deploy

Take the guided product tour, or have us run a live proof on one of your own applications - discovery to a confirmed attack chain in about 30 minutes.

Take the product tour →Book a live PoC

What you get on the first run

  • Proven findings, each backed by a real, safe exploit
  • A correlated attack chain across sources
  • A 0-100 posture score with an A-F grade
  • A CI gate verdict you can flip from Monitor to Block
  • Framework mapping and an evidence vault for audit

Deploy it, or let us prove it on your app

From discovery to a proven attack chain. A PoC in your own environment.

Book a PoC See the product Pricing