Guardrails for AI-Generated Code and AI-Driven Refactoring
Joint study with AFRL
FrozenReGrade helps the typical model fix 152% more bugs.
Every model we tested fixed more bugs.
A joint study with the Air Force Research Laboratory, cleared for public release. 17 language models from 6 providers, and the median model fixed 152% more bugs at a median 42% lower cost per bug fixed.
One context block in your agent's prompt. Nothing else changes.
See the evidence for this →Why teams use ReGrade
Three minutes on the problem it solves: catching the changes no test asserts, knowing a release holds up under load, and proving a refactor behaves like the code it replaced.
Want to watch one run start to finish? See the runnable demos. Each one has a repo you can clone.
The code is changing. The risks are growing.
Proven in the Wild
A vulnerability hid for 7 years. Zero tests caught it. ReGrade found it on the first replay.
A widely-used open-source platform shipped a password hash disclosure bug for 7 years. Standard tests passed every day. ReGrade caught it on the first replay, without knowing the vulnerability existed.
example ReGrade merge request comments
7 Years
Undetected
First Replay
Found Immediately
Zero Prior Knowledge
Used existing tests
Powered by NCAST Technology
Three steps, and nothing for your team to adopt.
ReGrade sends identical real-world requests to your current and candidate versions, then compares the responses field by field. It runs on the traffic and the tests you already have.
1
Record
Capture traffic from any source: production, CI tests, or security scanners. ReGrade works with whatever you already have.
2
Replay
Replay the same traffic against your candidate version. The original responses were already captured in step one.
3
Compare
Field-level differential analysis identifies regressions, vulnerabilities, and performance changes, automatically.
What testing and code review miss
Tests verify what you expect. ReGrade catches what you don't.
Slow before anyone complains
ReGrade compares P95 and P99 latency across versions, so a release that quietly got slower is a number you see on the merge request rather than a support ticket next week.
Zero-Day Discovery
By comparing actual responses against a known-good baseline, ReGrade surfaces vulnerabilities that no test was written to find, because no one knew they existed.
Your agents correct themselves
ReGrade hands its findings straight back to the coding agent, which fixes what it broke before a reviewer ever sees it. Your engineers review a smaller diff, and the agent learns from real behavior rather than from a failing test.
It meets your team where they already work
MCP Server
Native integration with AI coding agents. ReGrade findings flow directly into the agent's context for immediate self-correction.
Merge Request Analysis
Automatically analyze candidate builds before merge. ReGrade comments appear alongside your code review with specific field-level findings.
Preview Before Deploy
Replay production traffic against your candidate version in a safe environment. Know what will break before it reaches users.
See what changed in your own traffic
We will show you what ReGrade finds on a service you already run. No retraining, no CI changes, nothing for your engineers to install.