Pricing

Two products. Pick the plan that fits how you work.

Runs finish in minutes for a fraction of a manual pentest. Developers scan every release and take a one-click fix PR; pentesters run client engagements and ship a white-label report. Choose your track below.

Starter
$249 / mo
Solo builders.
  • 5 scans / month included
  • 1 app
  • Working PoC on every finding
  • CI integration — scan every PR
  • Autofix → draft pull request
  • Overage $199 / scan
  • Add certified CREST & OSCP human review — $399 / scan
Choose Starter
Developer · most popular
$999 / mo
Growing teams shipping AI features regularly.
  • 15 scans / month included
  • 5 apps
  • Working PoC on every finding
  • CI integration — scan every PR
  • Autofix → draft pull request
  • Overage $199 / scan
  • Add certified CREST & OSCP human review — $399 / scan
Choose Developer
Enterprise
Custom
Banks and regulated products.
  • On-prem / VPC, bring your own model key
  • Unlimited scans (fair use)
  • DORA & PCI DSS evidence packs
  • SSO / SCIM, audit logs, SLAs
  • Certified CREST & OSCP human review included
  • Prevention — PR gate blocks changes that introduce an attack path
  • Runtime sensor add-on — eBPF detections on your risk graph
Book a walkthrough

On-prem / BYO-key means the model runs on your key inside your environment — your code never reaches us, and your LLM cost is your own.

Straight answers

What you're actually paying for.

What counts as a scan?

One run against one target (an app, repo, or API). A pull-request check and a full weekly scan each count as one.

Why is it so much cheaper than a pentest?

A manual engagement is human time — $10,000–50,000 and weeks. A scan is fully automated and runs in minutes, so there are no human hours to bill.

Do you train on our code?

Never. Code is processed in a throwaway sandbox and is not used to train any model. See the Trust Center →

Can a runaway scan blow our bill?

No. A hard per-scan spend cap stops any scan at a ceiling you set, so an autonomous run can't exhaust your budget.

Is there a free trial?

Yes — a free scan, no card needed. You'll see real findings; the working exploit and autofix unlock on a paid plan.

Do we need a security team?

No. Point it at your app and read the results. Enterprise adds a human-validated tier when a regulator wants a person to sign off.

Get started

Start free. Pay when it earns its keep.

Run a free scan on us and see a real, provable finding before you decide.

Start a scan See how it works