codeneath

About Codeneath

Use AI. Know what it built.

A software security and reliability studio for the AI era. We use AI in every review, then read what it built, line by line.

See Codeneath ReviewsRead the articles

What Codeneath does

Codeneath or mhsaeed.com?

One question decides who does the work.

Which question are you asking?

“Is our software safe and reliable?”codeneath.devReviews, hardening and re-reviews. You're in the right place.
“Can it be built, finished or saved?”mhsaeed.com →New products, operational systems and project rescues, by Muhammad Saeed.

This site passes its own review

We sell code reviews, so this site has to pass one.

Terminal
$ curl -I https://codeneath.dev
content-security-policy: default-src 'self'; script-src 'self' 'sha256-…'; style-src 'self'; img-src 'self' data:; font-src 'self'; connect-src 'self'; media-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-frame-options: DENY
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
permissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), …
Content-Security-Policydefault-src 'self'; script-src 'self' 'sha256-…'; style-src 'self'

Blocks unapproved scripts, inline style injection, framing and third-party network calls.

  • /.well-known/security.txt (RFC 9116)
  • No cookies, analytics or third-party scripts
  • 3 runtime packages, pinned to exact versions
  • WCAG 2.2 AA contrast, tested in both themes
See Codeneath ReviewsView security.txt