About EvalScope

EvalScope is the eval-to-prod boundary exposure scanner by Ingenious AI. It answers one question: what could an eval agent reach?

Give it your declared repo files and configs — the surfaces an evaluation agent would see first. It scores eval-agent reachability across three finding classes: secret-like patterns (presence only — values are never stored or shown), permissive role declarations, and exposed configs. Every finding carries a severity and concrete remediation.

Honest scope, on every surface: EvalScope scans declared/public surfaces only. It finds exposure; it never proves exploitability and cannot see your private infrastructure. It never touches live credentials, never calls cloud APIs, and never authenticates anywhere.