LENSby Meristem

Lens explores.
Core decides.

Connect your repos, scan for dependency risks and exposed secrets, and review findings with policy-driven approvals. Full audit trail, nothing runs without your sign-off.

For founders and teams who want visibility into their codebase without losing control.

No credit card required

See pricing โ†’
LENSExploring
Observing

Proposals

Add input validation
now
Refactor auth module
2m ago
Update API schema
5m ago

Ledger

Exploring: Login flow analysis

a3f2...8b1cnow

Proposal: Add validation checks

7d4e...2a9f1m ago

Policy check: Rate limiting rules

c1b5...4e3d3m ago

3

Viewing

7

Proposals

2

Awaiting

Human Approval Required

Add input validation to login form?

๐Ÿ” Lens explores. You decide.

What it does

Connect your repos, scan for risks, and review findings with full traceability.

Policy Rules & Approvals

Define rules that flag findings for human review. Approve or reject actions before they proceed.

Scan Dashboard

See scan results as they complete. Severity breakdown, trend charts, and findings per project.

Audit Ledger

Append-only log with checksums. Verify integrity, prove compliance, export for audit.

Project Workspace

Repos, connectors, and scan history in one place. Full context for informed decisions.

Connectors

GitHub, Azure DevOps, and Git over HTTPS. Connect your repos and scan automatically.

DaaS Understanding

AI analyzes your codebase and generates system maps, ambiguity reports, and improvement proposals. You review and decide.

๐ŸŒฑ UI that feels observational, not operational

How it works

From connection to findings, with human control at every step.

1

Connect Repository

Link your GitHub, Azure DevOps, or Git repo. Tokens are encrypted server-side.

2

Run Scan

Analyzers check for dependency risks and exposed secrets. Findings appear in your dashboard.

3

Review Findings

Review each finding by severity. Define policy rules that require approval before proceeding.

4

Track & Export

Every scan, finding, and decision is recorded in the audit ledger. Export anytime.

Pricing

Start free. Upgrade when you need more.

Free

Explore and experiment

Free

1

projects

1

seats

50

jobs/mo

Includes

  • Scan dashboard
  • Basic ledger (7 days)
  • Community support
  • No connectors
  • No SSO
Most popular

Pro

For solo founders and developers

$23/mo

Billed annually ($276/yr)

5

projects

1

seats

500

jobs/mo

Includes

  • Policy rules & approvals
  • Full ledger (90 days)
  • GitHub connector
  • Email support

Team

For teams shipping fast

$79/mo

Billed annually ($948/yr)

20

projects

10

seats

2,000

jobs/mo

Includes

  • Role-based permissions
  • Unlimited ledger
  • GitHub + Azure DevOps
  • Priority support
  • Audit export

Enterprise

For organizations with compliance needs

Custom

โˆž

projects

โˆž

seats

โˆž

jobs/mo

Includes

  • SSO (SAML/OIDC)
  • Self-hosted option
  • Custom connectors
  • SLA guarantee
  • Dedicated support
  • Security review

Compare plans

See what's included in each tier

FeatureFreeProTeamEnterprise
Human approvals
Scan dashboard
Audit ledger790UnlimitedUnlimited
Projects1520Unlimited
Seats1110Unlimited
Jobs per month505002,000Unlimited
DaaS runs per month1520Unlimited
Policy rules & approvals
GitHub connector
Azure DevOps connector
Audit export
Role-based permissions
SSO (SAML/OIDC)
Self-hosted deployment
SLA guarantee
Dedicated support
Self-hosted

Install in 3 minutes

Self-host with Docker. No external dependencies required.

Platform Setup (Self-hosted)

Docker Engine 24+Windows with WSL2 or Linux4GB RAM minimum
1Clone the repository
$git clone https://github.com/meristem/lens.git
$cd lens
2Configure environment
$cp env.example .env
3Set your API key
# Edit .env and set your keys:
$JWT_SECRET_KEY=your-secret-here
$SIMULATE_PAID=true
Or use OPENAI_API_KEY if you prefer GPT-4
4Start the services
$docker compose up -d
5Open the app
$open http://localhost:3000

Lens Client

Install the Lens client on your development machine to connect to the platform.

Windows (PowerShell)
PS>irm https://lens.meristem.dev/install.ps1 | iex
Linux / macOS
$curl -fsSL https://lens.meristem.dev/install.sh | bash
Activate Your Device
$lens activate <your-token-from-dashboard>
Get your activation token from Settings โ†’ Devices in the dashboard

Questions

Common questions about how it works.

Lens runs two deterministic analyzers: a dependency scanner (unpinned versions, wildcard deps, HTTP registries, missing lockfiles) and a secrets scanner (AWS keys, GitHub tokens, private keys, hardcoded passwords, high-entropy strings). No LLM is involved in scanning.

Ready to take control?

Start exploring with your team today.