Quick start

How to use Check AI Code

A short guide for your first scan: what to paste, how to read results, and when Pro features help.

/review
Upload FileTypeScriptapi.ts
async function charge(user) {
  items.forEach(async item => {
    await api.bill(user.id, item.price)
  })

  return { ok: true }
}
62

2 issues found

Static checks + AI review

CRITICAL

Async work inside forEach is not awaited.

WARNING

Result returns before billing completes.

The 3-step flow

1

Paste or upload code

Use a single file, a small component, an API handler, or a script. Choose the language if auto-detection is not enough.

2

Click Analyze

Free scans run static rules and Semgrep checks. Pro can use deep scan and larger inputs.

3

Review the findings

Start with Critical issues, then Warnings. Use Info items as cleanup and compatibility hints.

How to read the result

Treat severity as a priority signal, not an absolute truth. A clean result is helpful, but not a guarantee that the code is bug-free.

scan result

Critical

Fix before shipping. These are likely bugs or security risks.

Warning

Review carefully. These may break in edge cases.

Info

Lower-risk hints, cleanup, or compatibility notes.

Suggested fix

await Promise.all(items.map(item => api.bill(user.id, item.price)))
Pro controls
Standard Fast ScanDeep Thorough Scan
Deep uses more quota

Privacy Mode still runs static checks. It skips the LLM-enhanced explanation layer.

Privacy Mode and deep scan

Pro users can run deeper checks or skip LLM enhancement when they want a more privacy-conscious static pass.

Best use cases

AI-generated code before shipping

Small scripts and backend handlers

React components and TypeScript utilities

Security-sensitive snippets with keys, queries, or file paths

Review AI-generated code before shipping

Use the practical checklist for async bugs, auth checks, input validation, secrets, files, framework drift, dependencies, and tests.

Read the checklistReview JavaScript async bugs

Important limits

It does not replace tests, manual review, or a formal security audit.

It cannot guarantee every bug will be found.

Business logic still needs human context.

Free vs Pro

Free

Daily scans, upload/paste workflow, local rule engine, Semgrep checks, and saved single-file history when signed in.

24-hour trial

New signed-in users automatically get 24 hours of Pro access, then return to Free unless they upgrade.

Pro

More capacity, larger inputs, deep scan mode, Privacy Mode, and automatic activation after payment.