Automatic tests, code-quality, dependency and security gates that run before every publish — with one-click AI fixes.

From code to confidence

Before your app goes live, XAIO runs a layered set of automatic checks — tests, code quality, dependencies and security — so broken or risky code never reaches your users. Every check runs in the QA tab in the exact order it executes, each with a per-check checklist and a clear pass/fail state.

The test cockpit

The Tests tab is a full cockpit:

Run tests on demand, or let the AI agent write and run them for you
Per-test results with filters, grouped by file
Line-level code coverage
Run history and exportable results
Live progress shown as a card in the chat

Pre-publish quality & security gates

When you publish — and on demand from the chat — XAIO runs a set of open-source tools inside its own EU pipeline:

Code quality — SonarQube: static analysis for bugs, code smells and maintainability
Dependencies — Trivy: scans for known vulnerabilities (CVEs) and leaked secrets
Static security (SAST) — Semgrep: finds insecure patterns in the generated code
Dynamic security (DAST) — OWASP ZAP: tests the deployed app, including signed-in pages
API contract — Spectral: lints the generated OpenAPI specification
Linting — ESLint: JavaScript/TypeScript checks

These tools analyse your generated code, not personal data, and — unless noted — send nothing to a third party.

Fix findings with AI

Every finding lands in one unified Problems panel, grouped by the type of check. Hand the whole list to Fix with AI and the agent resolves them in a single pass — then re-run the gate and publish.

Gate before publish (optional)

Turn tests and checks into a gate in Settings: a failing gate blocks the publish so broken code never reaches production. After a successful publish, the Publish checks panel shows exactly which tests and gates ran and passed — your proof the app went live in good shape.

Open-endpoint check

Before going live, XAIO also flags publicly reachable, unauthenticated API endpoints and lets you select which ones to secure and hand straight to Fix with AI.