Enterprise · design-partner pilot

Build it with us.

The enterprise design-partner pilot ingests an approved SARIF or CodeQL finding, creates one bounded authorization, runs in a customer-controlled disposable runner, tests and rescans the exact commit, and opens a draft pull request with verifiable evidence. It never directly merges or deploys.

This is an application, not a checkout: the pilot is being built with a small number of design partners, and nothing on this track is generally available today.

A scoping conversation
We map your findings, repositories, and constraints to what the pilot can safely attempt — and say plainly what it can’t.
Security review, first-class
Your security team gets the architecture, data-flow, responsibility split, and verifier tooling before anything touches an environment.
Design-partner terms
Commercials are shaped per partner across finding volume, portfolio, deployment form, and support scope. No published price, no self-service checkout.

How the workflow works →Capability matrix →Trust & security →

Just want the local loop? Community is free forever — no application needed.

Apply for the pilot

3 min

Company *

Your role *

Name *

Work email *

Source control *

Code scanning today *

Open findings (approx.)

Preferred deployment

Security review timeline

Primary languages / rule families

Model / data-region constraints

What would make the pilot a win for you?

Anything else

Please don't include credentials, source code, or scanner output — none of that is needed (or accepted) at this stage.

I agree that Aion may store this application and contact me about the pilot, as described in the privacy policy. *

Design-partner pilot · not general availability · we reply within one business day.