Patch
Patch fixes what yof finds
Patch is yof's fix agent. When yof finds a problem in your code, Patch opens a pull request with the fix, checks it and watches your CI. You decide what gets merged.
You build fast. The holes ship just as fast.
With an AI assistant you can build a whole app in a weekend. The code it writes can also leak a key, leave a database open to anyone or pull in a package with a known vulnerability, and nothing tells you. yof finds these. Patch writes the fix.
What Patch does
- yof finds a problem. A check of your app or your code finds something to fix, like a vulnerable package or a database table with no access rules.
- Patch opens a fix. Patch writes the fix as a pull request on its own branch. Known kinds of problems follow a written recipe; other code gets a small AI-written fix, always as a draft.
- Patch checks it first. Before the pull request opens, Patch checks the fix on a copy of your files: the problem is gone, nothing new appears and every file still parses.
- Your CI runs, Patch watches. Your own CI runs on the branch. If a check fails, Patch comments once and offers a corrected draft. The problem counts as fixed only when a new scan no longer finds it.
You stay in control
Draft or ready
Config fixes, like security headers and pinned GitHub Actions, open ready for review. Package and database fixes open as drafts, because Patch can't run your install. A small package update is marked ready only after every check on it passes.
You review and merge
Every fix is a pull request you can read line by line. Nothing is merged without your yes.
Your main branch stays yours
Patch writes only to its own fix branch. It never pushes to your main branch.
Daily limits
Patch writes at most 3 AI-written fixes per repository a day. If it can't count them, it writes none.
See for yourself
Read a full sample report on a made-up site, and the benchmark page, where yof is run against public practice apps with known problems.
Price
$29 a month
Patch costs $29 a month and includes one Outside report every quarter.
Payment opens soon. Reports can't be ordered yet, and nothing is charged. Patch is free early access until then.
Checking your own apps with yof is free. Patch is the one subscription.
Questions
Does Patch merge anything by itself?
No. Patch opens a pull request on its own branch and never pushes to your main branch. Nothing is merged without your yes.
Does Patch run my tests?
No. Patch checks the fix on a copy of your files, but it doesn't run your install, build or tests. Your own CI does that on the branch, and Patch reads the result.
Which problems can Patch fix?
Packages with a known vulnerability, missing security headers in your config, GitHub Actions not pinned to a commit and database tables without row level security. For other findings in your code it can write a small AI fix, always as a draft.
What does the AI see?
Only the finding and about 40 lines on either side of it, in one file. It runs on our own engine, not at an outside AI provider.
What does Patch need from me?
The yof GitHub App on your repository, and the repository linked in the yof app. Patch reads the linked repository and opens its pull requests there.
Can I get pull requests in my language?
Yes. The repository owner picks one of 12 languages for the title, the description and Patch's comments.