Documentation
How CodeDD works, and how to put it to work
Guides to CodeDD audits, risk scoring, portfolio monitoring, the CLI, the Enterprise Data API, and how your source code is protected.
27 guides · 6 topics · Updated
Start here
Deal teams & investors
Read an audit with confidence
What CodeDD examines, how findings become a risk score, and what the recommendations mean for the deal.
CTOs & engineering leads
Connect code safely
Run audits on your own machines with the CLI, or connect a repository, and see how source code is protected.
Portfolio & data teams
Put CodeDD data to work
Monitor portfolio companies, pull results into your BI stack, and measure AI-assisted development.
All guides by topic
Getting Started
Core concepts and onboarding content to understand CodeDD quickly.
3 guides
- OverviewLearn how CodeDD analyzes your codebase with AI-powered due diligence2 min read
- Setting Up a Portfolio OrganizationCreate your organization, connect repositories, and run your first portfolio group audit2 min read
- Team Members & Access RolesInvite colleagues to your portfolio organization and understand initiator, reviewer, and submitter permissions3 min read
Software Audit
Deep technical documentation for how the audit engine analyzes repositories.
8 guides
- Audit Process OverviewWhat happens during a CodeDD audit and what you receive3 min read
- Repository Connection & SecurityHow CodeDD securely connects to your Git repositories8 min read
- File Discovery & IndexingHow CodeDD discovers, categorizes, and prepares files for analysis2 min read
- AI-Powered File AnalysisHow CodeDD analyzes individual source files4 min read
- Architecture Analysis & MappingHow CodeDD maps the architecture of one repository from its code, what the graph, evidence levels and Scale readiness tier mean, and what they cannot tell you25 min read
- Cross-File ContextualizationHow CodeDD understands relationships and patterns across your codebase1 min read
- Audit Consolidation & Risk ScoringHow CodeDD synthesizes findings into actionable risk scores2 min read
- Recommendations GenerationHow CodeDD creates actionable remediation guidance1 min read
Portfolio Analytics
Organization setup, portfolio monitoring, DORA delivery metrics, the estate architecture map, and AI agent telemetry across every audited repository.
10 guides
- AI Agent Telemetry (OpenTelemetry Setup)Connect Claude Code, Cursor, Gemini CLI, Codex, and other AI coding agents to CodeDD via OpenTelemetry push8 min read
- Enterprise Data APIRead your CodeDD audit and portfolio data from your own BI tools, warehouses, and reporting pipelines77 min read
- Portfolio MonitoringThe initial audit, quarterly audits that re-review only changed code, monthly pulses, and how Git connections apply across portfolio companies45 min read
- DORA Metrics and Deployment MappingHow CodeDD measures the five DORA delivery metrics, where deployment data comes from, and how to configure the production environment mapping41 min read
- Estate Map & Portfolio ArchitectureHow the estate map shows a portfolio's business domains, dependencies, topology and company Scale readiness tier, and how to read, filter and adjust it27 min read
- CVE AlertsHow CodeDD checks for new vulnerability advisories every six hours, matches them to the dependencies of your Portfolio Monitoring companies, and tells you in the app and by email8 min read
- MCP ServerConnect Claude, ChatGPT, VS Code and other AI assistants to CodeDD over MCP, so they can read your audits, portfolio reports and Portfolio Monitoring as you34 min read
- GlossaryWhat the words, states, codes and numbers in CodeDD mean, the same in the app, the Enterprise Data API, the AI advisor and the MCP server34 min read
- Portfolio InsightsThe 23 fund-level Portfolio Insights in seven sections, with the unit, window and goal of each, and what computing, not measured and no data mean8 min read
- Security findings (Issue Compass)How Issue Compass lists the security findings of a group audit, what each severity and review state means, which findings count as open, and how the API, advisor and MCP serve them5 min read
Security & Privacy
Security controls, encryption, compliance, and data handling policies.
3 guides
CodeDD CLI
Terminal-first workflows: install, authenticate, configure scope, and run audits locally.
2 guides
Account & Billing
Payments, LOC budget, subscriptions, passwords, CLI tokens, and common account tasks.
1 guide
Can’t find what you need?
Tell us what you are trying to do. The CodeDD team answers product and security questions directly.