It’s open-core/partially open source, so you can inspect what goes into scoring (the enterprise compliance rulepacks are closed because they change often).
I’d love QA help (edge cases, false positives/negatives) and advice on what signals thanks a lot )