Ocherfort

What is Ocherfort?

Ocherfort scans repositories, maps findings to standards, evaluates ship/no-ship gates, and uses AI only to explain evidence. Ocherfort is a local-first security CLI for repositories. It scans code, workflows, release pipelines, and agent configs, maps findings to standards like CWE, OWASP, and NIST, and answers the question teams actually care about.It also includes evidence-based AI for explanation and prioritization, without letting AI invent findings or override policy. Join the beta.