Sieve: Developer Security

软件开发工具

仅适用于 Mac

免费 · App 内购买

Mac

Sieve brings local secret-exposure findings and project dependency advisories into one native developer-security workspace. LOCAL SECRET REVIEW Review supported AI coding history and selected environment files for known credential patterns. Redacted previews and fingerprints help you decide what to rotate or clean up. Detection is best-effort; no findings is not proof of safety. PROJECT SECURITY Inventory pinned npm and Swift dependencies in folders you choose, without executing package installers or project code. Supported formats: package-lock.json v2/v3 and Package.resolved v1–v3. Missing, unsupported, unreadable and incomplete coverage stays explicit. OPTIONAL OSV MONITORING Check manually with consent for that scan, or enable automatic checks every hour or every two hours for an individual project. Repeated checks require explicit per-project permission and run while Sieve is open and your Mac is awake. Reopening or waking runs one overdue check, not a backlog. Turn automatic checks off at any time. Replacing the folder resets its monitoring permission. Eligible public-registry npm and GitHub Swift package names and versions are sent to Google's OSV service, along with ordinary connection metadata such as your IP address. These coordinates can reveal technology choices. Source files, folder paths, lockfile contents and secret values are not uploaded. Other package sources remain coverage gaps. HONEST EVIDENCE See check times, saved advisory matches and coverage warnings. Failed checks retain previous evidence rather than report a clean result. Matching an advisory does not prove exploitability. Review the advisory and upgrade compatibility before acting. Sieve is periodic dependency-advisory monitoring, not antivirus or a full source-code audit. VAULT AND PRIVACY The dashboard opens without an unlock prompt by default. Copying, storing, deleting or using Mac-vault secrets requires fresh Touch ID or your Mac password. An optional whole-app privacy lock is available in Settings. User-selected secrets stay in macOS Keychain. Redaction of supported local history is a separate explicit action with a backup. READ-ONLY PROJECT MCP Share saved project metadata with compatible assistants through separately enabled local MCP tools. Assistants may receive project names, relative manifest paths, package versions and findings; their providers' policies apply. Project tools cannot choose folders, scan, query OSV, install packages or modify your code. Existing vault execution is separate and requires fresh Mac authentication. No AI subscription or Apple Intelligence is needed for scanning or matching. FREE AND PRO Free includes up to 3 projects, manual checks, opt-in periodic monitoring, saved findings, secret scanning, vault features and read-only dependency MCP. Optional Sieve Pro is a one-time purchase for up to 50 projects, up to 20 saved scans per project and JSON report export, within a shared 32 MB storage limit. Verified original owners retain Pro access. No recurring subscription, automatic remediation or AI service is included. Apple handles purchases and restores. Support: https://gautam-u.github.io/sieve/support Privacy: https://gautam-u.github.io/sieve/privacy/

评分及评论

  • 此 App 尚未收到足够的评分或评论，无法显示整体评分。

• Unified security dashboard with clear severity counts for secret exposures and project dependency advisories. Click a severity card to review matching findings. • Compare complete advisory checks to see new matches and severity changes; incomplete or failed checks stay explicit and retain previous evidence. • New project-security workspace for pinned npm and Swift dependencies. • Opt-in hourly or two-hour OSV monitoring, with per-project consent and visible check times, while Sieve is open and your Mac is awake. • Read-only dependency findings through MCP, with separate sharing consent. • Dashboard access without an unlock prompt by default; fresh Mac authentication for secret actions and an optional whole-app privacy lock. • Optional one-time Pro unlock for a larger portfolio, longer history and JSON export. No subscription. MCP users: re-enable MCP in Settings and copy the updated app-based configuration. Enable project sharing separately.

版本 1.1.1

开发者“Sunitha Vaishnavi Nalainthran”已表明该 App 的隐私规范可能包括下述数据处理方式。更多相关信息，请参阅 开发者隐私政策 。

  • 未收集数据

    开发者不会从此 App 中收集任何数据。

    隐私规范可能因你使用的功能或你的年龄等因素而异。 进一步了解

    辅助功能

    开发者尚未表明此 App 支持哪些辅助功能。 进一步了解

    信息

    提供者
    Sunitha Vaishnavi Nalainthran
    大小
    4.3 MB
    类别
    软件开发工具
    兼容性
    设备需装有 macOS 13.0 或更高版本。
    • Mac
      设备需装有 macOS 13.0 或更高版本。
    语言
    英语
    年龄分级
    4+
    App内购买
    是
    版权
    © 2026 Sunitha. All rights reserved.
  • 开发者网站
  • 隐私政策

    • 更多来自"Sunitha Vaishnavi Nalainthran"的 App