Crypto inventory, modernized

Stop guessing where weak crypto hides.

Cipherscope is completely free and scans real codebases at speed, replaces regex noise with AST precision, and exports clean JSONL for audits, migrations, and compliance teams.

See the scans How it works

Tree-sitter precision Language-aware analysis

JSONL output Machine-ready inventory

Built for real repos Fast parallel scanning

Inventory Snapshot

assets libraries, algorithms

evidence file + line + column

output newline-delimited JSON

cipherscope --roots /repo --exclude '**/vendor/**' -o
                  inventory.jsonl

Turn crypto sprawl into a living inventory for every team.

Discovery Finds libraries + algorithms.

Context Evidence at the exact line.

Governance Export, diff, automate.

AST precision

Regex scans see text. Cipherscope sees structure.

Tree-sitter builds an AST so matches are tied to real calls, imports, and symbols. Less noise, fewer false positives, and a crypto inventory you can trust.

Regex scanners

Match target Raw text tokens

Noise Comments, constants, strings

Confidence Low, requires manual cleanup

Cipherscope (AST)

              Match target
              Calls, imports, symbols
            
              Noise
              Lower false positives
            
              Confidence
              High, evidence at the line

Built for the way crypto actually ships.

Cipherscope is a fast CLI that understands real code. It parses with Tree-sitter, matches patterns from a dedicated registry, and outputs a stable inventory format you can trust.

Scan

Point at monorepos, services, or archives. Cipherscope walks everything in parallel.

Normalize

Output JSONL with identifiers, evidence, and precise file locations for every match.

Act

Fail CI on weak algorithms, generate compliance artifacts, and feed dashboards or inventories automatically.

CI/CD fit

Build Test Cipherscope Deploy

Real world scans

A crypto inventory you can see and trust.

Each card shows the crypto footprint, density, and the exact code lines where Cipherscope found matches. This is the inventory, made visual.

Repository sample 3 large, public codebases

Output format JSONL evidence stream

Generated Loading...

Django

Python focus

45 crypto signals

2888 files scanned

15.6 signals per 1k files

10 affected files

Featured scan

PBKDF2 algorithm

django/utils/crypto.py:77:12

                    
                    return hashlib.pbkdf2_hmac(digest().name, password, salt, iterations, dklen)
                  

Ready to map your crypto inventory?

Completely free. Install in seconds, scan any repo, and get a JSONL inventory fast.

cargo install cipherscope New to Rust? Install it once: rust-lang.org/tools/install Then run: cipherscope --roots . -o crypto.jsonl Results in seconds.

View source See the scans