Collect
Receive reports and researcher replies in one shared security inbox.
Vulnerability report verification
Know which security reports are real.
Filtro receives external vulnerability reports, checks each claim against the relevant code, and gives your security team a clear decision before engineering spends time on it.
Your code stays with you · Your team controls every decision · Cancel anytime
Verified report
High · 8.1Authorization bypass in invite acceptance
DecisionValid vulnerability
Cross-workspace access is possible when the organization ID is replaced before acceptance.
Confidence96%
3 claims checked · 5 code references
internal/invitations/service.goLines 118–143 · authorization boundary
✓api/invitations/accept.goLines 42–71 · attacker-controlled input
✓Protect engineering time. Send credible reports forward with the evidence already attached.
Keep private code private. Verification runs inside your environment, where your code already lives.
Prove the response. Preserve the decision, communication, deadline, and remediation history.
One place for every external report
From “we found a vulnerability” to a decision your team can trust.
Filtro handles the work between a researcher’s first message and the moment your engineers know exactly what deserves attention.
Check
A private Agent follows each claim through the relevant code and gathers supporting evidence.
Decide
Your team gets a clear verdict, confidence level, affected code, risk, and next steps.
Close
Track the response, remediation deadline, final fix, and complete audit record.
Verification that goes beyond the report
Let the evidence decide.
Researchers describe what they believe is wrong. Filtro’s private Agent checks that claim where your code lives, traces the behavior that matters, and returns a conclusion your team can review.
- Distinguishes the reported claim from what the code proves
- Shows the exact evidence behind the decision
- Explains prerequisites, impact, and remaining uncertainty
- Lets your team confirm or contest the result
Investigation traceComplete
1
Locate entry pointInvite acceptance endpoint
✓2
Follow attacker inputOrganization identifier
✓3
Check authorizationMembership scope not enforced
!ResultClaim supported by code
Built for audit evidence
Show the work behind every security decision.
Keep the operational evidence teams need for vulnerability management reviews, including SOC 2 and ISO 27001 programs, without rebuilding the story from tickets and inboxes.
Immutable timeline
See when a report arrived, who reviewed it, every decision, and when it closed.
Human-friendly risk
Start from an AI-prefilled CVSS assessment, then let your team confirm or contest it.
SLA evidence
Set deadlines by severity and preserve the policy used when each report was classified.
Remediation proof
Connect the original claim to the engineering work and evidence that resolved it.
Supports evidence forSOC 2ISO 27001Vulnerability managementIncident response
Private by architecture
Your code never has to come to us.
The Agent runs in your environment
It works beside the systems you already control, instead of sending your repositories to a third party.
Your connections remain yours
You choose what it may inspect and use your own repository and AI accounts. Those credentials stay under your control.
Filtro receives the answer, not your code
Your workspace gets the verdict and the evidence needed to act while source code remains inside your environment.
Simple pricing
Give every report a fast, defensible answer.
One workspace for intake, private code verification, researcher communication, risk, remediation, and audit evidence.
Filtro workspace
$99USD
per month
per month
- Unlimited report investigations
- Researcher conversations
- Customer-hosted Agent
- Risk and SLA tracking
- Audit evidence exports
Start with the next report