The safety layer for AI-coded software

AI wrote the code.
Thuban checks the damage.

Scan your repo for hallucinated imports, dead code, architecture drift, dependency risk, and tech debt. Then fix what can be fixed automatically. One command. Zero config.

Get Started Free See Features
20
Built-in Commands
0
Dependencies
30s
Average Scan Time
3s
Pre-commit Gate
Terminal
$
Features

Everything your codebase needs

19 commands. Zero dependencies. Works on any JavaScript or TypeScript project.

🔮

AI Hallucination Detection

Find phantom imports, invented APIs, and deprecated patterns that AI coding tools leave behind. Built specifically to catch the failure modes AI coding tools create.

Only in Thuban

Tech Debt Scoring

Get a clear 0-100 score across Security, Architecture, Code Quality, Dependencies, and Mother Code coverage. Grade A through F.

🔧

Auto-Fix Button

One command fixes hundreds of issues automatically. Inject annotations, remove debug logs, update deprecated APIs, break circular deps.

🧬

Mother Code DNA

Inject contextual DNA into every file. Your codebase becomes self-aware — every file knows what it does, what depends on it, and what breaks if it changes.

Only in Thuban
📈

Visual Dashboard

Beautiful HTML reports you can email to your CTO. Score rings, category breakdowns, fixable items grid. Dark theme. Print-friendly.

GitHub CI Action

Drop one file into your repo. Every PR gets a grade comment. Block merges below threshold. Dashboard artifact on every run.

🚫

Pre-Commit Gate

Block bad code before it enters your repo. 3-second scan on every commit catches hallucinated APIs instantly. Install once, forget forever.

Only in Thuban
💰

Tech Debt Cost Calculator

Translate tech debt into pounds and hours. Show your CTO exactly what bad code costs per month — and what Thuban saves. ROI in one command.

CTO Favourite
👻

Ghost Code Detection

Find AI-pasted functions that exist but are never called. Dead code inflates your bundle, confuses devs, and hides bugs. Thuban finds every ghost.

Only in Thuban
🤖

AI Risk Score

Per-function risk assessment for AI-generated code. Scores every function 0-100% using 12 signals. Know exactly which code needs human review before it ships.

Only in Thuban
📋

Copy-Paste Drift

Find similar code blocks scattered across files. Thuban clusters duplicates and recommends shared utilities. Kill redundancy before it kills you.

📄

Codebase Passport

One JSON file that describes your entire project — languages, architecture, sacred files, entry points, onboarding guide. New devs productive in minutes.

Onboarding Killer
🔍

Dependency Mapping

Full dependency graph with circular detection, orphan files, critical path analysis. Know what breaks before you change it.

💡

Drift Detection

Code evolves. Annotations become stale. Thuban detects when files have drifted from their declared purpose and flags the gap.

👁

Live Sentinel

Watch mode monitors your codebase in real-time. Save a file, get instant feedback. Hallucination check on every keystroke.

🔒

Safe-by-Default Fixes

Dry-run preview before any changes. Safe/unsafe separation. Git commit mode for easy rollback. Thuban never changes runtime behaviour without your explicit opt-in.

Senate Approved
📐

Baseline & Delta Scanning

Snapshot your current issues. Future scans only flag NEW problems. Perfect for CI — don't fail on legacy debt, only fail on new mistakes being merged.

CI Essential
📜

Rule IDs & Suppression

Every detection has a unique rule ID (HALL_API001, DEPR_API003). Suppress false positives with a simple // thuban-ignore HALL_API001 comment. Full transparency.

Trust & Safety

If Thuban is the safety layer, it must feel safer than the problems it prevents.

Every fix is reversible. Every detection is transparent. Your code never leaves your machine.

Dry-run by default

thuban fix . shows you exactly what would change — no files are touched until you explicitly add --fix. Preview every patch before it lands.

Safe / Unsafe separation

Annotation injection and debug log removal are safe — they never change runtime behaviour. Circular dependency restructuring is unsafe — it requires the --unsafe flag.

Git commit mode

Use --commit and every fix becomes a separate, labelled git commit. Don't like it? git revert HEAD. One command to undo.

Code stays local

Thuban runs 100% on your machine. Zero API calls. Zero telemetry. Zero cloud. Your code is never transmitted, uploaded, or processed externally. Period.

Who It's For

Built for the people who care about code quality

Whether you're shipping solo or leading a team, Thuban catches what your tools miss.

💻

Solo AI Builders

"I shipped Cursor code that crashed in production."

You're building fast with Copilot, Cursor, or Claude. Thuban catches the phantom APIs and ghost functions before your users do. Run npx thuban scan . before every deploy.

💼

CTOs & Engineering Leads

"I have no idea how much tech debt is costing us."

Thuban translates your codebase health into hours and pounds. Get a board-ready PDF showing exactly where the risk is and what it costs. Run thuban executive . and forward it.

👥

Teams Using AI Coding Agents

"We're merging AI-generated PRs with no safety net."

Install the pre-commit gate once. Every commit is checked for hallucinated code in 3 seconds. Block bad code before it enters your repo. Run thuban gate --fix and forget about it.

Why Thuban

Not another linter. A different category.

Existing tools check syntax. Thuban checks whether your AI-generated code is real.

Feature Thuban ESLint SonarQube
AI hallucination detection
Ghost code detection Partial
AI risk scoring per function
Tech debt cost in £ / hours Partial
Pre-commit hallucination gate
Copy-paste drift detection
Codebase passport / identity
Zero config / npx command Needs .eslintrc Server required
CTO executive PDF report Partial
Auto-fix
Safe/unsafe fix separation
Baseline / delta scanning Partial
Rule IDs + inline suppression
Price Free / £19/mo Free $150+/mo
How It Works

Three steps. Two minutes.

No signup. No config files. No cloud account. Just run it.

1

Run one command

Point Thuban at any directory. It scans every file, maps dependencies, checks for hallucinations, and scores your health.

npx thuban scan .
2

Read the report

Get a clear grade (A-F), issue count, and a visual HTML dashboard. See exactly what's wrong and what can be auto-fixed.

npx thuban dashboard .
3

Fix it (safely)

Preview all fixes in dry-run mode first. Then apply safe fixes only, or use --unsafe for runtime changes. Every fix can be auto-committed for easy rollback.

npx thuban fix . --fix --commit

Every day you're merging AI-generated code without checking it.

How many phantom APIs are already in your codebase?

Find out in 10 seconds.
Run Your Free Scan
Pricing

Start free. Scale when ready.

No credit card required. Free tier works forever.

Free

£0

Try it right now

  • 5 scans per month
  • 100 files per scan
  • Summary output only
  • 1 real issue shown as proof
  • Community support
Get Started

Team

£99/mo

For teams up to 10

or £799/year (save 33%)

  • Everything in Pro
  • 5 repo licences
  • GitHub CI Action
  • Team dashboard
  • .thubanrc.json config
  • Priority support
Start Free Trial

Enterprise

Custom

For organisations at scale

  • Everything in Team
  • Unlimited repos + seats
  • Self-hosted option
  • Custom rules engine
  • SLA + dedicated support
  • SSO / SAML
Contact Sales

Try Thuban now. It takes 10 seconds.

Zero install. Zero config. Zero signup. Just paste this into your terminal.

npx thuban scan .

View on GitHub →