Product Roadmap
What we're building next
Skylos is laser-focused on high-signal SAST: less noise, faster scanning, and real workflows teams actually use. Here's what's shipping now and what's coming next.
Now (Shipping)
High-signal scanning + making Skylos feel instant
Quality Gate v1
CoreFail/pass projects with consistent thresholds and simple summaries.
Critical + new issues tracking
SecuritySurface danger_count + new_issues in every scan so teams can act fast.
Faster scans + caching
PerformanceSpeed improvements with smarter file processing and cache reuse.
Next (4 to 6 weeks)
Workflow upgrades that make teams stick
PR / Diff scanning
DevExOnly scan changed files + highlight what's newly introduced in this PR.
Auto-fix suggestions
AIGenerate safe, minimal patches with confidence gating (no risky rewrites).
Compliance mapping
ComplianceMap findings to OWASP / SOC2 / PCI style controls for reporting.
Later (2 to 3 months)
From scanner → to continuous security assistant
Policy-as-code rules
EnterpriseOrg-wide guardrails: what is allowed, what is blocked, what is warned.
Historical trends
InsightsTrendlines for risk over time: regressions, improvements, and hotspots.
Monorepo optimization
ScaleParallel pipeline tuning for huge repos with predictable runtimes.
Want something prioritized?
If you're building in a monorepo, need PR-only scans, or want stricter policy enforcement — we'll ship it with you.