CodeDD Platform / CLI

Run enterprise-grade software diligence without moving source code to the cloud.

CodeDD CLI gives security-conscious investment teams and engineering leaders a local-first execution model: analyze repositories on-prem, then synchronize structured findings to the CodeDD platform for shared decision-making.

Read CLI docs

Open source on GitLabMIT License

100%local source analysis

0source upload required

1unified cloud dashboard

Why teams choose CodeDD CLI

A privacy-first operating model for high-stakes diligence

Designed for PE firms, strategic acquirers, and portfolio engineering teams who need defensible insights without compromising data boundaries.

Code stays local

Source files are audited on your infrastructure, not uploaded for analysis.

Cloud visibility by design

Only structured findings, metrics, and summaries are synced to your CodeDD workspace.

Works with enterprise controls

Fit into your network policies, credential stores, and approval workflows.

Built for deal velocity

Run full-codebase audits quickly enough for pre-IC and confirmatory timelines.

Operator-grade output

Turn engineering details into board-ready risk language with remediation pathways.

Reusable across portfolio

Run consistent audit logic across multiple targets, products, and business units.

Workflow

From local execution to portfolio-wide clarity

Define scope

Select repositories and folders, then confirm what should be included before execution.

Run local analysis

Code quality, architecture, dependencies, and risk checks execute on your machine.

Review findings

See hotspots, key-person concentration, security exposure, and technical debt signals.

Sync to CodeDD cloud

Share summaries and evidence with investors, advisors, and portfolio teams in one place.

Active remediation

Stop triaging tickets. Start closing issues at scale.

An audit surfaces findings — sometimes thousands. Instead of working through them manually one by one, the CodeDD CLI turns the remediation phase into an AI-first, team-coordinated effort: AI proposes fixes, engineers validate and apply them, and the whole team tracks progress together from a shared live dashboard.

AI-assisted fix suggestions

For each finding the CLI reads the surrounding code and proposes a targeted fix — engineers review and apply, rather than hunting for context from scratch.

Team-coordinated effort

Claim, resolve, or comment on issues straight from the terminal. The shared state is visible to the whole team, eliminating duplicate work across thousands of findings.

Live progress dashboard

Flags and vulnerabilities are tracked per severity with progress rings and a contributor leaderboard — keeping momentum visible and accountability shared.

# list open issues assigned to you
codedd remediation issues --mine

# get an AI-generated fix suggestion
codedd remediation fix <issue-uuid>

# mark as resolved once applied
codedd remediation resolve <issue-uuid>

# leave a note for teammates
codedd remediation comment <issue-uuid> "patched in auth middleware"

Team dashboard

Every resolve is reflected in real time across the shared Remediation Dashboard — progress rings by severity, a contributor leaderboard, and team milestone achievements that keep long remediation runs moving.

Transparency by design

You decide what leaves your environment

The CLI enforces a strict boundary between local execution and cloud sync. Every request to the CodeDD cloud can be reviewed and approved by you before it is sent.

Stays local in your environment

Source files and repository history
Intermediate analysis artifacts
Provider API keys and execution context
Code snippets used during local LLM reasoning

Synced to CodeDD cloud workspace

Scored dimensions and technical risk indicators
Evidence-backed findings and remediation signals
Dependency and architecture summaries
Portfolio-level comparisons and trend history

Run with --show for transparency before sync

Pass --show when starting an audit to open a one-shot execution summary of what will be sent to CodeDD Cloud, then confirm once before submission. For per-request review, use--show-interactive. Nothing leaves your machine without your explicit confirmation.

Open source

The full CLI implementation is publicly available under the MIT license. Read the source, audit the logic, and verify exactly what the tool does before running it in your environment.

View on GitLab

Quick start

Go from install to first audit in minutes

# 1) install
pip install codedd-cli

# 2) authenticate
codedd auth login --token <your_cli_token>

# 3) choose audit context
codedd audits list
codedd audits select

# 4) define local scope
codedd scope add /path/to/project
codedd scope confirm

# 5) set provider key
codedd config set-key anthropic

# 6) run local audit
codedd audit start

# optional: review execution summary before cloud sync
codedd audit start --show

✓Scope confirmed (3 repositories)
✓Analysis complete: 2,431 files scanned
✓148 findings categorized by severity
✓Risk summary and recommendations generated
✓Sync complete: workspace updated

Open platform dashboard →

Need local-first diligence at deal speed?

We will help your team deploy CodeDD CLI in a way that fits your security model, operating cadence, and investment workflow.

Review documentation