# GraphRisk

> Visualize Your Software Supply Chain Risk

GraphRisk is a dev-first security platform that maps your software dependencies and vulnerabilities into an interactive 3D graph. We help you identify attack paths, not just list vulnerabilities.

## Core Features

- **3D Dependency Graph**: Visualize your entire dependency tree and explore it interactively.
- **Attack Path Detection**: Automatically identify how vulnerabilities in deep dependencies can impact your core application.
- **Smart Remediation**: Get copy-pasteable fix commands for identified risks.
- **Universal Manifest Support**: Supports `package.json` (npm/yarn/pnpm), `requirements.txt` (Python), `go.mod` (Go), `Gemfile` (Ruby), and `Cargo.toml` (Rust).
- **SBOM Export**: Generate and export CycloneDX standard Software Bill of Materials.
- **CI/CD Integration**: Automate security scans in your pipeline (Pro/Team plans).

## Pricing

- **Free Tier**: 1 project, full visualization features, SBOM export. Free forever.
- **Pro Tier**: For professional developers. Increased limits, CI/CD integration, Email support.
- **Team Tier**: Collaborative features for growing teams.
- **One-Shot Audit**: One-time payment ($9) for a single permanent project scan.

## Use Cases

- **Security Audits**: Quickly assess the security posture of a new or existing project.
- **Compliance**: Generate SBOMs for regulatory compliance.
- **DevSecOps**: Integrate security scanning into the development workflow.
- **Vulnerability Management**: Prioritize fixes based on actual exploitability paths.

## Documentation

For more detailed integration guides, please refer to our documentation (coming soon).