Home

Qryon - Rust Monorepo Analyzer

Welcome to the Qryon Wiki! Qryon is a blazing-fast static security analyzer for polyglot projects.

Quick Links

• Getting Started
• Installation
• Configuration
• Rules Reference
• CLI Reference
• CI/CD Integration
• Roadmap

What is Qryon?

Qryon (Rust Monorepo Analyzer) is a high-performance static analysis tool that scans codebases for security vulnerabilities and code quality issues. Built in Rust for speed, it supports multiple languages in a single scan.

Supported Languages

Language	Security Rules	Quality Rules	Typestate Analysis
JavaScript/TypeScript	15+	10+	Yes
Python	12+	8+	Yes
Rust	10+	6+	Yes
Go	12+	5+	Yes
Java	10+	5+	Yes

Key Features

• Multi-language support - Analyze JS/TS, Python, Rust, Go, and Java in one scan
• 65+ security rules - Detect vulnerabilities like SQL injection, XSS, command injection
• Typestate analysis - Track object lifecycle (use-after-close, double-lock, etc.)
• Cross-file analysis - Follow data flow across file boundaries
• Fast - Analyzes 1000+ files/second
• Multiple output formats - SARIF, JSON, GitHub Actions, HTML reports
• IDE integration - LSP server for real-time diagnostics

Current Status

Version: 0.20.0 Status: Production Ready
License: MIT OR Apache-2.0

See the Roadmap for planned features.