InsurStaq

InsurStaq is a local-first macOS security auditor. It maps your repository, runs deterministic scanners (SAST, secrets including git history, IaC, offline dependency CVEs), traces source→sink attack paths, and uses a local model to explain findings and draft fixes you approve , then rescans to verify. Source code never leaves your Mac. Air-Gapped Mode available. Compliance readiness mapping (not certification). Built for solo developers and small teams who cannot upload source to SaaS scanners.