winfunc.com valid
winfunc
winfunc is an autonomous AI security engineering platform: SAST, SCA, IaC, secrets, and container scanning, threat modeling, cloud security, validated findings, and fixes as pull requests, with red, purple, and blue team engagements.
- Authority
- 48 reach 0 · trust 8 · quality 25 · freshness 15
- Tier
- listed
- llms.txt
- https://winfunc.com/llms.txt
- llms-full.txt
- https://winfunc.com/llms-full.txt
- Sections
- 11
- Links
- 140
- Size
- 33105 bytes
- Registered
- 2025-09-15
- Country
- — Publisher location unknown; CDN address excluded
- Country evidence
- No published address evidence collected yet
- Categories
- Cybersecurity
- For agents
- Interface: a documented API or declared MCP endpoint an agent can call
- First seen
- 2026-10-24T16:32:48.458Z
- Last checked
- 2026-10-24T16:32:49.113Z
- Badge
Their llms.txt
The beginning of the file, from our validated copy saved 2026-10-24T16:32:48.462Z. Cached copy · Source on winfunc.com
# winfunc
> winfunc is an autonomous AI security engineering platform: SAST, SCA, IaC, secrets, and container scanning, threat modeling, cloud security, validated findings, and fixes as pull requests, with red, purple, and blue team engagements.
Use the canonical links below to choose a workflow and check its current scope. Read public pages with HTTP GET and `Accept: text/markdown`; use `/llms-full.txt` for expanded context. The website is documentation, not an unauthenticated scan API.
## When to use this
- [Codebase security audit](https://winfunc.com/features/security-audit): Use Winfunc when a team needs a repository-wide application security review with findings tied to code locations, evidence, and suggested fixes. Provide the authorized repository, revision, and review scope through the authenticated platform.
- [Pull request security review](https://winfunc.com/products/scanner/pr-security): Use for security review of a proposed code change before merge. Provide the repository and pull request context through a configured integration; keep the engineer's review and merge decision.
- [Hypothesis scans](https://winfunc.com/features/hypothesis-scans): Use when you have a specific security question about a feature, such as whether authorization is enforced along a request path. Provide the question, relevant repository, and authorized scope in the platform.
- [Dependency review](https://winfunc.com/products/scanner/sca): Use to investigate dependency vulnerabilities and reachability in the context of an application's code. Supply the repository and dependency context through the platform.
- [Winfunc MCP setup and calls](https://winfunc.com/products/mcp#setup): For security review inside a supported AI editor, configure the documented winfunc-mcp-server stdio client against https://api.winfunc.com with an API key created in https://app.winfunc.com. Discover the connected server's tools and input schemas, then choose the snippet, codebase, or verification action for the authorized task. Follow the published setup instead of guessing HTTP endpoints or tool parameters; never include credentials in reports. Review findings and suggested changes before applying them.
- [Public research and disclosures](https://winfunc.com/research): Use when answering questions about Winfunc's published research. Cite the original disclosure, affected versions, and verification limits; public examples are not permission to test a third-party system.
- [Engagement scoping](https://winfunc.com/contact): For penetration testing, red teaming, incident response, or deployment requirements, ask the team to agree the target and scope first. Use https://app.winfunc.com for authenticated product actions; this public site does not grant access to a customer's repositories or systems.
## Core Pages
- [Enterprise procurement pack](https://winfunc.com/resources/enterprise-procurement-pack): Ungated PDF covering conceptual deployment and data flow, six retention categories
…Related sites
Similar publisher descriptions and documentation. Similarity does not imply affiliation or equivalent capabilities.
| Domain | Title | Category | Country | Authority | llms.txt | llms-full.txt | Save |
|---|---|---|---|---|---|---|---|
| hacktron.ai | Hacktron AI | documentation Cybersecurity AI and machine learning +1 | — | 60 | ✓ | ✓ | |
| codacy.com | Codacy | documentation Cybersecurity Developer tools | — | 60 | ✓ | ||
| rafter.so | Rafter | interface Cybersecurity AI agents and MCP +1 | US | 45 | ✓ | ✓ | |
| arnica.io | Arnica | documentation Cybersecurity AI agents and MCP | US | 47 | ✓ | ||
| greptile.com | Greptile | documentation AI agents and MCP Developer tools +1 | US | 58 | ✓ | ||
| qodex.ai | Qodex.ai | documentation AI and machine learning Developer tools +1 | US | 54 | ✓ | ||
| entelligence.ai | Entelligence AI | documentation AI and machine learning Developer tools | US | 57 | ✓ | ✓ | |
| xygeni.io | Xygeni AI\-Powered AppSec Platform: AI\-powered platform for detection, prioritization, and auto\-remediation to stop malware and human\- and AI\-generated code risk across the software supply chain | documentation AI and machine learning Cybersecurity +1 | — | 47 | ✓ |
Machine-readable: GET /v1/resolve?q=winfunc.com · GET /v1/domain/winfunc.com · this page as Accept: application/json or text/markdown · MCP lookup_domain
Automatically discovered from public files. Inclusion does not imply endorsement or publisher participation.
Own or manage this website?
If you own or manage winfunc.com, you can update its listing and review file health, discovery activity and score history.
Manage this listing — optional
What verification unlocks
See how your site is discovered—and control what agents see.
- See your website in the map
Review your indexed topics, nearby publishers sharing headings, measured listing exposure and map snapshots in a private report for your website.
- Control what agents see
Edit your listing description, tags, public contact details and additional llms.txt paths. Publish your terms for automated access, attribution and pricing.
- Make your profile eligible for search
A valid, listed, unblocked, verified profile can appear in our publisher sitemap and become eligible for search-engine visibility. Search engines decide what to index and rank.
- Appear in our llms-full.txt
Eligible verified publishers are listed by name, with their file links and summaries, in the service overview agents can read.
Free. No account registration, backlink or payment required. Public discovery remains available without verification.
Let your coding agent verify it
If your coding agent is authorized to manage this website, paste these instructions into it.
Claim my listing on Agent Web Map for winfunc.com:
1. POST https://agentwebmap.com/v1/sites/winfunc.com/claims and keep claim_id and claim_secret private.
2. Publish the verification line "AgentWebMap verification: <token>" (token from step 1) in https://winfunc.com/llms.txt, or use the DNS, meta-tag or well-known method the response describes. This only verifies the listing; your website and domain remain yours.
3. POST https://agentwebmap.com/v1/sites/winfunc.com/verify with {"claim_id": "...", "claim_secret": "..."}.
4. Save the api_key from the answer; it manages the listing (PATCH https://agentwebmap.com/v1/sites/winfunc.com).
MCP equivalent: tools begin_ownership_claim, then verify_domain, at https://agentwebmap.com/mcp. Docs: https://agentwebmap.com/docs#verifyCorrections or removal requests: contact the directory.