Free: 1 scan per month. Top-up: $10 USD (₹799) for 6 scans, one-time purchase. Founder: $22 USD (₹1,799) per month or $220 USD (₹17,990) per year for 36 scans per month. Services from $150 USD (₹12,000).
Cloud plan: €99/mo (monthly) or €79/mo (billed annually). Pro plan: €179/mo. Platform plan: €299/mo. All plans include 7-day free trial with 1 workspace and 2 team members. No credit card required. Cancel anytime.
Key features
Security score out of 100 with findings ranked by severity
Plain-English vulnerability explanations
Attack path mapping to MITRE ATT&CK techniques
Code map showing which files to fix first
Audit logs of scans, sign-ins and changes
README badge showing current security grade
MCP server for scanning from AI agents
Leaked credential testing and live-key check
Cloud posture management (CSPM) for AWS, GCP, and Azure with 400+ configuration checks
Verified secrets detection that tests if leaked credentials actually work
Static application security testing (SAST) across Python, JavaScript, Go, Java and more
Container scanning with automatic SBOM generation for Docker, GCR, ECR, ACR and Docker Hub
Kubernetes security scanning for RBAC misconfigurations and workload hardening
Infrastructure as Code scanning for Terraform, CloudFormation, and Kubernetes YAML
Automatic compliance mapping for SOC 2, PCI DSS, ISO 27001, NIS2, CIS AWS, and CIS GCP
Web vulnerability scanning with 9,000+ security checks for applications and APIs
Plain-English findings with step-by-step remediation commands included
What makes it different
Only security scanner built specifically for AI-generated code from tools like Bolt, Cursor and v0
AI-powered false-positive reduction prevents noise in security reports
Automated fix prompts written for the specific AI tool that built the app
Code is deleted after scan completes with no backups or model training
Verified secrets testing to distinguish real breaches from false alerts
Compliance automation without consultant fees
Setup in 5 minutes with read-only access and no security team required
Built in Europe with GDPR compliance and EU-hosted infrastructure
Sentrint
Nuvm