# Rotwise

> Rotwise is a technical debt refactorer for AI-generated codebases. It connects to GitHub, scans a repository, scores the debt from 0 to 100, and fixes it in small pull requests that a human approves. It never touches main without approval.

Rotwise (https://rotwise.io) is built for founders and small teams whose product was written largely with AI coding assistants such as Cursor or Claude Code, and who now need to make that code safe to build on.

## How it works

- Connect a GitHub repository through the Rotwise GitHub App (least-privilege: contents write, pull requests write, metadata read).
- Rotwise runs heuristic rules (hardcoded secrets, SQL injection, mass assignment, unauthenticated routes, unsafe deserialization, command injection, open redirects, swallowed exceptions, N+1 queries, long methods, high complexity, missing tests, committed .env files, missing version pins) plus AI review with Claude.
- Findings are ranked by severity and sequenced into fix batches of at most 8 findings, security first.
- Each approved batch becomes one pull request with one commit per finding: one batch, one PR, one revert.
- The Debt Score starts at 100 and drops with each finding, weighted by severity and category. Higher is healthier.

## Supported

- Languages: Ruby, JavaScript, TypeScript, Python, Go, Rust, PHP.
- Code hosts: GitHub.

## Security

- Repositories are cloned into a temporary directory per job and deleted when the job ends; source code is never persisted.
- Rotwise never runs customer code or tests; validation is static (git apply --check).
- Customer code is sent only to Anthropic, under zero data retention.
- Every pull request requires explicit human approval.

## Pricing

- Free Scan: $0. One repository, one scan per month, up to 10,000 lines, read-only report.
- Indie: $49/month. One repository, 4 scans per month, up to 25,000 lines, 5 fix batches per month.
- Startup: $499/month. Three repositories, unlimited scans and fix batches, up to 75,000 lines, 14-day trial.
- Growth: $1,499/month. Ten repositories, unlimited scans and fix batches, up to 250,000 lines, trend dashboard.
- One-time audits: Quick Diligence $1,999, Full Audit + Fix Plan $4,999, Pre-Raise Cleanup $9,999.

## Main pages

- [Home](https://rotwise.io/): product overview and interactive demo
- [Pricing](https://rotwise.io/pricing): plans and audits
- [Security](https://rotwise.io/security): how source code is handled
- [Blog](https://rotwise.io/blog): technical debt in AI-generated code
- [Rotwise vs SonarQube](https://rotwise.io/compare/sonarqube): where each tool is the better choice for an AI-generated codebase

## Guides

- [Technical due diligence checklist for AI-generated code](https://rotwise.io/blog/technical-due-diligence-checklist-for-ai-generated-code)
- [Vibe coding technical debt: what it is and how to pay it down](https://rotwise.io/blog/vibe-coding-technical-debt)
- [Five security holes AI coding assistants leave behind](https://rotwise.io/blog/security-holes-ai-coding-assistants-leave-behind)
- [Ten debt patterns in AI-generated Rails apps](https://rotwise.io/blog/ai-generated-rails-app-debt-patterns)
- [Next.js API routes with no authentication: find and fix them](https://rotwise.io/blog/nextjs-api-routes-without-authentication)
- [You committed an API key to git. Here is what to do now](https://rotwise.io/blog/api-key-committed-to-git-what-to-do)