In simple English
When you build an app, your code collects names, passwords, and other personal facts about users. It sends these facts to databases, log files, and third-party services. Finding every place your code touches personal data takes weeks of manual review. Privado reads your source code and maps every path personal data takes from start to finish. You run the scan on your own computer, so your source code stays private.
What it is
An open-source static code analysis tool (a program that inspects source code without running it) that discovers personal data flows and security vulnerabilities in your codebase. It scans Java and Python codebases to trace 110 different personal data elements.
What it is good for
Solo builders and developers who need to fill out privacy compliance forms, generate app store data safety reports, or trace where sensitive user information travels in their app.
- Runs locally on your computer, so your source code stays private.
- Automates the tedious work of filling out app store privacy reports.
- Traces data flows from collection points to external third parties and databases.
- Requires Docker (a way to run a program inside its own sealed box, so it cannot break anything else on your server) to be installed and running on your system.
- Open source version is limited to Java and Python codebases.
- Results require a connection to an external cloud dashboard if you want to view them visually.
manual code audits and guesswork for privacy compliance forms
Docker
- semgrep/semgrep17k stars
A general-purpose static analysis tool for finding bugs and security issues in code, whereas Privado focuses specifically on data privacy flows.
- GitGuardian/ggshield2.0k stars
Scans code for exposed secrets and credentials, while Privado maps broader personal data flows for compliance.
- future-architect/vuls12k stars
Scans Linux machines over SSH for installed software with publicly reported security holes.
- cossacklabs/acra1.5k stars
A proxy that encrypts individual database fields on the way in and decrypts them on the way out.
- 0xERR0R/blocky7.0k stars
A small DNS service for a home or office network that refuses to look up advertising and tracking addresses.
curl -o- https://raw.githubusercontent.com/Privado-Inc/privado-cli/main/install.sh | bash privado scan <source directory>