The side panel is the product.

Open Magellan next to Setup and it analyzes whatever you click. Or search any component by name and pull it up without leaving the panel.

40+ RULES

The PMD catalog, in the browser

Apex: SOQL and DML in loops, async jobs in loops, missing with sharing, CRUD/FLS gaps, SOQL injection, hardcoded IDs and credentials, insecure endpoints, empty catches, tests with no assertions, SeeAllData=true, cyclomatic complexity, deep nesting, long methods. Flow: DML and Get Records inside loops, missing fault paths, System-Mode-Without-Sharing, hardcoded IDs and URLs. LWC: innerHTML, global document queries, unhandled GraphQL errors, leftover console.log.

A REAL TOKENIZER

Not grep. A lexer and a structural pass.

Magellan tokenizes Apex — comments, strings, and inline SOQL are tagged, so a query quoted in a comment never trips a rule — then builds a loop and method model to ask structural questions: is this query inside any loop? Every finding carries a confidence; heuristics that would need a full parser are shipped honestly labelled heuristic, never presented as certain.

RANKED, EXPLAINED, FIXABLE

Line, why, and how to fix it

Findings sort critical → warning → info, then by confidence, then by line. Each one shows the offending snippet, a plain-English explanation of the risk, and a concrete fix hint. Click through to that exact component in Setup. Search any class, trigger, flow or LWC by name from the panel itself.

Atlas: the whole org, ranked.

One button scans every Apex class, trigger, active Flow, and LWC in the org and hands you the tech-debt map a lead or an auditor actually wants.

Magellan Atlas: org-wide dashboard with severity counts and the components affected, findings grouped by component and expanded to show each finding with its line, a What's on fire card, and worst offenders — Every finding across the org, grouped by component, worst first. Open one to see its findings, with what's on fire right now alongside.

ORG SCAN

Same rules, whole org

Atlas runs the exact same engine over the org inventory — no new logic, no server. Filter by type or severity, search findings, sort by rule. Worst offenders rank components by severity-weighted debt; top rules fired tells you which anti-pattern dominates. Export CSV or JSON for the ticket.

WHAT'S ON FIRE

Risk vs. burning

Static findings say a class could fail. Atlas also reads your recent failed and aborted Apex jobs — batch, queueable, scheduled — and shows what's actually failing in production. A risky-but-working class and a class that aborted 169 times last week are very different problems; Magellan shows you both, and flags the component that's on both lists first.

WHICH ORG?

Never scan the wrong org

Signed into several orgs? Every surface names the org it's reading, with a loud PRODUCTION or Sandbox badge, and Atlas has an org switcher. The scan screen itself confirms the target while it runs.

3D Code Circumnavigation: your org as a world.

Magellan circumnavigated the globe. So does this: your org's code health as a moonlit 3D world you spin, zoom, and fly down into.

Magellan's 3D globe: carved continents for Apex, Flows, LWC and Triggers covered in glowing torches, amber for info, orange for warning, red for critical, with managed-package islands in the ocean — Every component is a torch. The hotter it burns, the worse it is, and anything failing right now burns brightest.

Text first, 3D second: the globe is how you find the problem; the side panel is how you read it.

Continents are component types, carved landmasses sized by how much code lives there, with ridges, valleys and rivers. Zoom in and each continent splits into parcels, one per component.
Every component is a torch. Cyan for clean, amber, orange and red as the findings get worse. Severity is geography: critical, warning, info and clean each hold their own region of the continent.
Managed packages are islands, sized by how many classes they hold, so a big package reads as real territory without ever dwarfing your own code.
Trade routes are dependencies. Focus a component and its routes light up: cyan for what it uses, ember for what depends on it. Load-bearing debt, visible.
Live failures heat the torch. A component that failed last night burns bigger, faster and toward magenta, and the ground around it ripples. The org's genuinely worst spot is always the most alive.
Fly it like a map. Drag to move, scroll to zoom where you point, and right-drag to turn and tilt the view. Voyage mode sails port to port through your worst offenders.

Close up on a burning component: its torch and light pool on the terrain, cyan and ember trade routes to its dependencies, and a card listing its findings and recent failures — Search any component and the camera pulls back, spins the planet, and dives onto its torch, with its trade routes lit.

No OAuth. No connected apps. No installed packages.

Every other analyzer wants a checkout, a scan job, or an upload. Magellan runs on the session you already have, against the code already in your browser.

CLICK, DON'T CONFIGURE

Zero setup

Nothing to install in the org — no connected app, no OAuth, no package, no CI step. Sign into Salesforce in Chrome the way you already do. Open the panel. Click.

RIGHT NOW, NOT NEXT BUILD

Feedback while you're looking at it

PMD and Code Analyzer tell you in a pipeline, later. Magellan tells you in Setup, now — the moment you open the class, before it's committed anywhere.

READ-ONLY, LOCAL

Look, don't touch

Magellan only ever reads. Source and metadata come from your browser straight to your org and stay there — analysis runs client-side, no servers, no accounts, no telemetry.

Apex classesApex triggersFlowsLWC Failed & aborted jobsDependenciesManaged packages

Free to use. PRO when you want the whole org.

The side panel is free, for good. PRO adds the org-wide view: one key, one payment, no subscription.

Free

forever

Findings for any Apex class, trigger, Flow or LWC
40+ rules, ranked by severity
Search any component from the panel
Live-failure banner
Setup deep links

PRO

$29

one-time, yours for good

Everything in Free
Export findings (Markdown, PDF report)
Scan org: every component, grouped and ranked, with CSV/JSON export
3D Code Circumnavigation
7-day free trial, no card and no email: start it from the PRO chip in Magellan's panel

Buy PRO — $29

Read-only isn't a setting. It's the product.

Magellan never writes to an org, and your code never leaves your browser.

The rules run in the browser. The engine is pure client-side code — it can't make a network call even if it wanted to. The org-wide scan is exactly the moment other tools upload your whole codebase to a cloud; Magellan doesn't.
No accounts, and nothing about your org on our servers. Every metadata call goes from your browser to your own org's APIs, using the session you already have. The only other call is to our license server when you start a PRO trial or activate a key, and it carries just the key and a random install ID.
No telemetry. We don't know when you install it, open it, or what orgs you point it at.
Nothing installed in your org. No connected app, no OAuth, no package.

Read the full privacy policy →

Magellan PMD-grade code review, the moment you click a component.