Code security / Pricing

The right coverage.
For your next security question.

Start with PR reviews at $30 per seat per month or Whitebox testing from $100. Scope a custom assessment for mature applications and live targets.

Compare the plans
For everyday code review

PR Agent

Pull request review

Developer seats

$30per seat / month

For teams bringing security into everyday code review.

Capability checklist

  • Automatic PR reviewSecurity feedback when a pull request opens.
  • Inline commentsFindings posted beside the affected change.
  • Suggested fixesA practical direction for remediation.
  • Injection reviewInvestigate unsafe handling of untrusted input.
  • Authorization checksReview access-control changes and resource access.
  • Secret-handling checksExamine how sensitive values are handled.
  • Source control connectionsGitHub, GitLab, and Bitbucket workflows.
  • Unlimited repositoriesConnect repositories for your developer seats.
Start freeExplore PR Agent

Whitebox

Repository security testing

Starting from

$100USD

Final pricing depends on the application and assessment scope.

For mature applications

Custom pricing

Scoped to your architecture, complexity, and assessment needs.

See custom assessment details

Capability checklist

  • Whole-repository assessmentInvestigate the codebase beyond a single change.
  • Code-derived threat modelUnderstand entry points and trust boundaries.
  • Cross-file data flowFollow data through handlers and services.
  • Source-to-sink investigationTrace input to a sensitive operation.
  • Exploitability contextUnderstand how a potential issue can be reached.
  • Prioritized findingsDecide which issues need attention first.
  • Supporting code evidenceReview the path and affected source context.
  • Assessment reportBring findings into engineering triage.
Scope my assessmentExplore Whitebox

Red Agent

Live target assessment

Scoped to your target

Custompricing

Priced around target scope and assessment cadence.

Capability checklist

  • Defined assessment objectiveStart with a target and a clear security question.
  • Live target investigationAssess the running application.
  • Specialist agentsInvestigate candidate weaknesses and attack paths.
  • Independent verificationValidate candidates before confirming a finding.
  • Evidence per findingRecord proof of the observed behavior.
  • Confirmed findingsReview results supported by verification.
  • Live run activityFollow the assessment as it progresses.
  • Impact for remediationUse the evidence to plan engineering follow-up.
Talk to salesExplore Red Agent

All prices are in USD. Each agent is scoped separately. The Whitebox starting price is confirmed against your application before an assessment is agreed.

Whitebox testing

Sized to your application.

A focused codebase and a mature application can need very different assessments. We agree the scope and price with you.

Whitebox testing

Starting from $100

Start with a defined repository and a focused assessment scope. Our team confirms where your application fits.

  • Repository and application scope agreed
  • Code context and data-flow investigation
  • Prioritized findings with supporting evidence
Scope my assessment

Find your coverage

Need a closer comparison?

Explore the full capability comparison and custom assessment options for mature applications.

Compare coverage & custom pricing

Pricing questions

What counts as a PR Agent seat?

A seat is one active developer whose pull requests PR Agent reviews in a billing month. The price is $30 per seat per month.

Is there a free trial for PR Agent?

PR Agent starts free with no credit card required, so you can see the review workflow before subscribing.

What does Whitebox starting from $100 mean?

$100 is the starting price for Whitebox testing, not a flat price for every codebase. Our team confirms the final price after reviewing the repository, application complexity, and agreed assessment scope.

How are mature applications priced?

Mature applications use custom pricing. The quote considers the size of the codebase, architecture and service boundaries, integrations, assessment depth, and scan volume. Contact our team to scope the application.

Are the agents bundled together?

The agents cover different workflows. The Whitebox starting price and Red Agent quote do not automatically include PR Agent or another agent. Our team can help scope the combination you need.

How is Red Agent priced?

Red Agent uses custom pricing based on the targets in scope and the assessment cadence. Share your target and objectives with our team for a quote.

Let's scope the right assessment.

Share your repository, application maturity, or target objectives. We'll help you choose the coverage and confirm the price.

Talk to our team