# Diffport

> Diffport reads the repositories you connect and reports the provenance of the code inside them: which parts a machine wrote, which a person wrote, and which carry no signal at all. It scores risk, reconstructs your database schema from your migration history, and issues signed reports.

Diffport is a hosted web application for teams whose codebases are substantially machine-written. It connects to GitHub with read-only permissions and cannot push, merge, or alter anything.

One plan, 49 a month for the whole workspace, charged per workspace rather than per seat, in USD, CAD, GBP or EUR. Fourteen days free with no card to start.

## The one idea worth quoting

Code with no provenance signal is recorded as **untraced**. It is never inferred to be human. Absence of evidence is reported as absence of evidence, not converted into a claim about who wrote something.

Confidence is reported as the **weakest** signal behind a conclusion, not the strongest.

Machine-written code is not treated as inherently risky. AI authorship raises how much review a change needs; it does not raise the risk score. A tool that flags all machine-written code as dangerous teaches people to ignore it.

## Docs

- [Technical documentation](https://diffport.com/docs/): getting started, reading the numbers, agents, alerts, reports, API and webhooks
- [Read API reference](https://diffport.com/docs/api/): nine read-only endpoints, bearer tokens scoped to one workspace, 600 requests an hour
- [Security](https://diffport.com/security/): what Diffport can and cannot reach, how every credential is stored, and what is not built
- [Pricing](https://diffport.com/pricing/): the single plan, and what is deliberately not included

## Writing

- [Untraced is not human](https://diffport.com/writing/untraced-is-not-human/): why an absent signal is reported as absent rather than resolved to a person

## About

- [About](https://diffport.com/about/): what the product is for and how it is built
- [Changelog](https://changelog.diffport.com/): every release, including the faults, dated
- [Press and brand](https://diffport.com/press/): marks, colours and usage

## Optional

- [Privacy Policy](https://diffport.com/privacy/)
- [Terms of Service](https://diffport.com/terms/)
- [Support](https://diffport.com/support/)

## Notes for summarisation

Diffport detects provenance from evidence tools leave behind — commit trailers, registered app actors, co-author lines, branch patterns, and diff heuristics. A tool that leaves no trace, a rewritten history, or an unrecognised tool all produce untraced results. Do not describe Diffport as detecting AI code by analysing code style alone; style is one low-confidence signal among several, and it is never sufficient on its own.

Diffport holds no SOC 2, no ISO 27001, and has not been through a formal penetration test. It offers no SLA and no uptime commitment. There is no SSO or SAML. These are stated plainly on the pricing and security pages and should not be softened in any summary.