Clear scores
Production readiness plus focused security and reliability findings.
Planned Docker Compose audit
AI wrote your Docker stack.
We check whether you should actually deploy it.
Upload your AI-generated Docker Compose configuration and get a clear production-readiness and security review before you deploy.
One-time payment · No subscription
- Actionable findings
- Severity prioritized
- Human checks flagged
1services:
2 api:
3 image: acme/api:latest
4 volumes:
5 - /var/run/docker.sock:/var/run/docker.sock
6 db:
7 ports: ["5432:5432"]3 findings detectedReview before deployment
68/100The gap
Valid YAML is not the same as a production-ready stack.
AI tools like ChatGPT, Claude and coding agents can generate Docker Compose files in seconds. But a file that looks correct is not automatically:
- Secure
- Production-ready
- Maintainable
- Resilient
- Safe for persistent data
Example output
A report you can act on
Not a wall of generic advice. A prioritized Docker Compose review tied to your configuration.
Production Readiness
68/100
Needs attentionCritical
Docker socket mounted into container
A compromised container could gain control of the Docker host.
api.volumesHigh
PostgreSQL exposed on host port 5432
The database may be reachable beyond the private application network.
db.portsMedium
Images use
:latestDeployments can change without a corresponding configuration change.
2 servicesMedium
Missing healthchecks
Service health cannot be reliably observed by the orchestrator.
3 servicesMedium
Secrets stored directly in environment variables
Sensitive values are embedded in the Compose configuration.
db.environmentGood
Persistent volumes configured
Database state is mapped to a named volume.
db_dataGood
Restart policies configured
Key services can recover after a process or host restart.
3 servicesIllustrative sample report. The audit product is currently in validation and is not yet available.
Planned coverage
The planned audit checks for…
A focused set of Docker Compose best practices, security checks and production-readiness signals — without pretending static analysis knows your entire infrastructure.
- 01Privileged containers and Docker socket mounts
- 02Sensitive host mounts and root containers
- 03Linux capabilities and container privileges
- 04Exposed database and admin ports
- 05Unpinned images and
latesttags - 06Plaintext secrets
- 07Missing healthchecks and restart policies
- 08Persistent storage and network isolation
- +Additional production-readiness checks
What you would get
One configuration in. A practical review out.
Prioritized issues
Every finding grouped by severity, with a plain-language explanation.
Concrete fixes
Actionable recommendations and YAML examples for possible corrections.
Honest limits
Anything that needs context or a human check is clearly marked for manual verification.
No false certainty
What an automated audit cannot know
The goal is not to provide false certainty. The audit should identify what can be determined from your configuration and clearly mark what still requires human verification.
- Host firewall configuration
- Whether backups are actually working
- External network topology
- Runtime secrets supplied outside Compose
- Your business and availability requirements
Simple pricing
Review one stack.
Pay once.
No seat pricing, recurring plan or sales call.
One Docker Stack Audit
€9.90
One-time payment · No subscription
- Production Readiness Score
- Security & Reliability Findings
- Severity Prioritization
- Explanations & Fix Recommendations
- Suggested YAML Examples
- Manual Verification Checklist
FAQ
Questions, answered.
Do I need an account?
The planned flow does not require an account: upload a configuration, pay once and receive the report.
Will my Compose file be stored?
We plan to process uploaded configuration only for the audit and avoid permanent storage. Final retention details will be documented before launch.
Is this a replacement for a security professional?
No. It is intended as a focused first-pass Docker Compose security check, not a penetration test, architecture review or compliance assessment.
What Docker Compose versions are supported?
We plan to support the current Compose Specification. Exact compatibility and validation rules will be published before launch.
Can I upload Dockerfiles too?
The first planned version focuses on Compose configuration. Dockerfile analysis may follow if there is enough demand.
Is this a subscription?
No. The planned price is €9.90 for one Docker stack audit, paid once.
Before you ship