AmicusProof

For software teams, agencies and SMEs

Your team writes with AI. AmicusProof double-checks.

The neutral second opinion on every pull request – and the evidence the Cyber Resilience Act requires.

See packages

How the double-check works

  1. 01

    Developer + AI assistant

    Your team works as usual with Cursor, Copilot and others.

  2. 02

    Pull request

    Every change lands as a pull request in the repository.

  3. 03

    AmicusProof review

    We review automatically under AP-26 – independent of the tool that wrote the code.

  4. 04

    Comment in the PR

    Grade and findings appear right in the pull request, with a suggested fix.

  5. 05

    Approval to merge

    Code only goes live once your policy is met.

amicusproof bot commented

Proof Grade: 1.6

1 × medium – missing rate limit on /api/login

0 × critical, 0 × high

✓ Policy met · merge approved

Four-eyes principle for AI code

No AI-generated code goes live without a second, independent review. What's standard in accounting applies to software here: whoever writes doesn't sign off.

  • Independent of the AI tool and the developer
  • Traceably documented per pull request
  • Policies you define – e.g. “no merge with critical findings”

Cyber Resilience Act

The EU Cyber Resilience Act (CRA) requires makers of software with digital elements to prove security across the whole lifecycle.

  1. 11 Sep 2026

    Reporting obligations apply: actively exploited vulnerabilities and severe incidents must be reported.

  2. December 2027

    Full obligations: security requirements, documentation and conformity.

What AmicusProof delivers

SBOM

A bill of materials of all software components, kept up to date automatically.

Vulnerability monitoring

We alert you as soon as a new hole in your dependencies becomes known.

Review reports

Every review traceably documented and archived.

Evidence folder

All evidence collected, ready for customers, auditors and authorities.

Not legal advice. For the legal assessment of your product please consult a specialised lawyer.

Packages for teams

Most chosen

Team

An ongoing second look for your team.

up to 10 developers

  • Up to 10 developers
  • Second check on every pull request
  • Policies and merge gates
  • Team overview with grade history
  • Seal for approved builds

Team Plus

For several projects, repos and departments.

up to 25 developers

  • Everything in Team
  • Up to 25 developers, multiple repos
  • SBOM (inventory of your software)
  • Vulnerability monitoring
  • Prioritised re-check after updates
  • Monthly evidence report

Individual

For larger organisations, acceptances and white label.

on request

  • Framework agreement with fixed review times
  • CRA evidence folder for audits
  • Independent acceptance before go-live
  • White label from 10 projects
  • Named contacts

All prices net plus VAT. · Pricing

Friends programme for agencies

Building for clients? We review alongside you – and you pass the Verified seal on to your clients.

Review client projects

Every project gets a report and a grade.

Pass on the seal

Your clients show the Verified seal with their own proof page.

20 % discount

On all reviews for your client projects.

White label from 10 projects

Reports with your logo on request.

Let's talk about your team.

In 30 minutes we'll show you the double-check on a real pull request.