Cacomi: Find AI Code & Secrets
Scan source code and IPA/APK
Only for Mac
Free · In‑App Purchases
Mac
Point Cacomi at your Swift or Kotlin project, or drop an .ipa or .apk, and see leaked API keys, leftover print() calls and dead code. Everything runs on your Mac.
Catch hardcoded API keys, weak crypto and debug leftovers before they ship. Cacomi scans your Swift, Kotlin and Python code plus .ipa, .apk and .app binaries, entirely on your Mac. No uploads, no accounts, your code never leaves.
START FREE: CLEAN UP
- Find unused code in Swift, SwiftUI, Objective-C, C, C++, Python, JavaScript, TypeScript, Kotlin, Java, Rust, Go, Shell and more
- Find debug statements: print, debugPrint, NSLog, os_log, console.log, println
- Comment, delete or wrap findings in #if DEBUG blocks, with one-tap undo
- Unlimited local scans
SECURE: CACOMI SECURITY
- Hardcoded secrets across 40+ provider families (AWS, GitHub, Stripe, OpenAI and more)
- Weak crypto, SSL/TLS bypass and risky network configurations
- MASVS L1/L2 mapping, taint analysis, PII detection, tracker identification and vulnerable-dependency hints
- Prompt-leak indicators for apps that talk to AI models
- Export PDF reports, SARIF and CycloneDX SBOM / ML-BOM
BINARY AUDIT: CACOMI PRO
- Local analysis of app packages you provide: .ipa, .apk, .app
- Mach-O and ELF hardening checks: ASLR/PIE, code signing, stack canaries
- APK signing-block and certificate analysis
- Flags patterns associated with known vulnerable or outdated third-party libraries
AI CODE AUTHORSHIP
See which parts of your codebase may have been written or assisted by AI, so you know where extra human review is worth it. Supports Swift, Kotlin and Python. This is an analytical signal (about 60 % accuracy), not proof of authorship, and should always be reviewed in context.
HOW IT WORKS
Pick a folder or a package. Cacomi analyzes it locally and groups findings by file, in context, each paired with a reviewable action: comment, delete, wrap or undo. Cacomi never changes code without your explicit review, and every action is reversible.
BUILT FOR DEVELOPERS, NOT FOR DEVICES
Cacomi is a static code-review tool. It analyzes only the source files and binaries you explicitly select. It is not an antivirus, anti-malware or device-protection product, does not monitor or protect your Mac or other apps, and performs no real-time or background scanning. It performs no dynamic analysis, exploitation, fuzzing or penetration testing; it complements, but does not replace, manual security review or professional pentesting. Packages up to approximately 2 GB are supported, depending on structure and complexity.
* Technical notes:
Cacomi is not an antivirus, anti-malware, or device security product, and it is not a penetration testing tool. It does not scan, monitor, or protect your Mac, other installed apps, or system files, and it performs no real-time or background protection of any kind.
Supports app packages up to approximately 2 GB, depending on file structure and scan complexity.
Cacomi is a code-review tool for developers. All analysis is static (source code and binary files only) and runs entirely on-device, on files explicitly selected by the user. Cacomi does not access, scan, or interact with any other app, process, or file on your system.
Cacomi is not an automatic code remover - it's a focused local review tool. Every action is visible and reversible; you decide what to keep, comment, delete, or investigate.
Cacomi performs static analysis only. It does not perform dynamic analysis, active exploitation, fuzzing, or any form of penetration testing. It is designed to catch issues before release, not to test a live or deployed system. Cacomi complements, but does not replace, manual security review or professional penetration testing.
Currently, AI code authorship detection supports Swift, Kotlin, and Python, with approximately 60% accuracy.
* Terms of Use (EULA): https://www.apple.com/legal/internet-services/itunes/dev/stdeula/
Ratings & Reviews
- This app hasn’t received enough ratings or reviews to display an overview.
- Improved AI code detection accuracy.
The developer, RAUL MONTESINOS FERNANDEZ, indicated that the app’s privacy practices may include handling of data as described below. For more information, see the developer’s privacy policy .
Data Not Collected
The developer does not collect any data from this app.
Accessibility
The developer has not yet indicated which accessibility features this app supports. Learn More
Information
- Seller
- RAUL MONTESINOS FERNANDEZ
- Size
- 25.5 MB
- Category
- Developer Tools
- Compatibility
Requires macOS 15.0 or later.
- Mac
Requires macOS 15.0 or later.
- Mac
- Languages
- English
- Age Rating
4+
- 4+
- In-App Purchases
Yes
- Cacomi Lifetime $5.99
- Cacomi Security – Annual $9.99
- Cacomi Security – Monthly $2.99
- Cacomi Pro – Annual $39.99
- Cacomi Pro – Monthly $4.99
- Copyright
- © DataBoosters
