Roadmap

What is already live, what is actively being built, and what is on deck next. Priorities can shift as the product evolves.

Shipped

Available now.

MCP support for Claude Code, Cursor, and Windsurf

Run crawwwl audits directly from MCP-compatible coding tools without leaving your editor.

GitHub repository audits

Audit public GitHub repositories by URL, without cloning them locally first.

Dashboard with audit history and report viewing

Browse past audits, open full reports, review score changes, and track token usage from the dashboard.

Usage-based billing

Pay only for the AI usage consumed during paid audits, with token count and estimated cost shown after each run.

Ask crawwwl AI about your audit

Ask follow-up questions about an audit and get answers grounded in that audit's code context. Available in the CLI and the web dashboard.

In progress

Actively being worked on.

More accurate scoring

Improve how penalties are weighted, avoid zeroed-out scores, and handle non-applicable categories more cleanly.

Cleaner issue grouping

Group repeated findings, collapse long file lists, and reduce noise in larger audits.

Fewer false positives for React and Next.js

Make the scanners more context-aware around hooks, server components, dynamic imports, and common framework patterns.

Planned

What we're building next.

crawwwl watch

Real-time scanning on every file save. Runs the engine locally with a live terminal overlay — issues appear and disappear as you write code. No API calls, no tokens, no delay.

crawwwl guard

Pre-commit hook that scans your staged diff and flags confirmed issues before the commit lands. Runs automatically on every git commit.

crawwwl secure

Database security auditing with read-only scanning. A new mode focused on catching security issues in your data layer.