Skip to content
zkaozkaozkao docs
These docs describe staging.zkao.io and the @zksecurity/zkao-cli@next release. For production, see docs.zkao.io.
The zkao robot running with a checkered flag

Build on zkao

Launch security audits, triage findings, and publish results from your terminal, your CI, your code, or your AI agent.
QuickstartAPI reference

zkao audits code for security bugs, with a focus on cryptography and zero-knowledge circuits. Everything you can do on a project in the app, you can also do through its API.

Terminal window
npm install -g @zksecurity/zkao-cli
zkao login
zkao scans launch --repo <repoId> --budget 500

Pick your tool

Section titled “Pick your tool”
CLIThe zkao command. JSON on stdout, built for shells and scripts.
TypeScript SDKA typed client generated from the OpenAPI spec, with helpers to wait on scans.
REST APIEvery endpoint, request body, and response shape.
GitHub ActionScan every pull request's diff, or the whole repository on a schedule.
AI agentsA skill that teaches Claude Code and other agents to drive your project.
AuthenticationLog in from a browser, or mint a scoped token for CI.

Made for agents too

Section titled “Made for agents too”

Markdown pages

Every page is also served as Markdown. Add .md to its URL, or use the copy button next to its title.

Agent skill

The skill lives at /skill.md. Point your agent at it.