Human in the loop

Enterprise

AI does the reading.
People sign off.

On Enterprise, Nandee security engineers review what the agents find and fix, and anything that changes your code or tests your app waits for a person on your team to approve it.

Talk to usSee Enterprise
SESSIONSTORE.SWIFT · GREEN AGENT func logout() async throws { - clearUI() + try await api.revoke(token) + try Keychain.delete("refresh") session = nil } Replayed the old token. 401 now. Good. NANDEE SECURITY ENGINEER APPROVALS 2 OF 2 Nandee review Confirmed Your eng lead Approved

What you get

Machine speed.
A name on every call.

  • Finding review

    Checked before it reaches you

    A Nandee security engineer confirms critical and high findings before they land in your queue.

  • Fix review

    A second pair of eyes on every diff

    Green Agent's changes are checked by someone who has shipped mobile security fixes.

  • Approval gates

    Nothing moves without a yes

    Red Agent runs and code changes wait for a named person on your team.

  • Audit trail

    Who, what, and when

    Every review and approval is logged, ready to hand to your auditor.

  • A named engineer

    Someone who knows your app

    One security engineer assigned to your account, reachable on email and Nandee Messenger.

  • Turnaround

    Reviews on a clock

    Reviewed findings and fixes land within two business days.

One finding, start to merge

Three agents, two people, one log.

HighSession token still valid after logout
  1. 09:12 · DASTFound. Old token replayed after logout, still accepted.
  2. 09:14 · AI TriageRanked #1. No root needed, exposes the account.
  3. 09:20 · Green AgentFix drafted. Revoke on the server, then wipe the Keychain entry.
  4. 11:40 · Jay B., Nandee security engineerConfirmed exploitable. Severity held at High.
  5. 13:05 · John D., your eng leadApproved fix. Merged PR #482.
Export audit log When an auditor asks who checked this, you'll have a name.

Where people fit

  1. 01ConnectUpload a build or link CI
  2. 02ReadSAST, DAST, and SCA
  3. 03TriageFalse positives out, ranked
  4. 04 · Early accessAttack pathsRed Agent chains findings
  5. 05FixGreen Agent writes it
  6. 06 · This pageReviewPeople sign off

Fair questions.

Is this only on Enterprise?

Yes. Human in the loop is part of the Enterprise plan.

Who are the reviewers?

Nandee's in-house application security engineers, with hands-on mobile pentesting experience across iOS and Android. Our team holds certifications including CISSP. Reviewers are full-time Nandee staff, not contractors, and every review is logged in your audit trail.

Does review slow us down?

Review applies to critical and high findings. Everything else reaches you as soon as triage is done.

AI at full speed. A person at the end.

Talk to us