pricing
Free to find out.
Cheap to keep watching.
Scan one app for free, no card. Pay when you want your repo scanned too, rescans on a schedule, and a heads-up when a new prompt breaks something.
Free
Check one live app for API keys leaked into the code your visitors download.
- 1 app
- 3 scans per month
- Leaked API keys in your JavaScript
- AI SDKs called straight from the browser
- Security headers and HTTPS
- Copy-paste fix prompts for Lovable, Replit, Bolt and Cursor
Builder
For your side projects: scan the code too, and get told when a new prompt breaks something.
- 3 apps
- 100 scans per month
- GitHub repo scanning, on every push
- Vulnerable dependencies, committed secrets, missing RLS
- Weekly rescans and change alerts
- Email, Slack and Discord alerts
- Everything in Free
Pro
For people shipping for real: daily rescans, and your AI agent can scan and fix on its own.
- 15 apps
- Unlimited scans
- Daily rescans
- MCP server for Cursor, Claude Code and Windsurf
- API keys for CI
- 5 team seats
- Everything in Builder
Free
Check one live app for API keys leaked into the code your visitors download.
- 1 app
- 3 scans per month
- Leaked API keys in your JavaScript
- AI SDKs called straight from the browser
- Security headers and HTTPS
- Copy-paste fix prompts for Lovable, Replit, Bolt and Cursor
Builder
For your side projects: scan the code too, and get told when a new prompt breaks something.
- 3 apps
- 100 scans per month
- GitHub repo scanning, on every push
- Vulnerable dependencies, committed secrets, missing RLS
- Weekly rescans and change alerts
- Email, Slack and Discord alerts
- Everything in Free
Pro
For people shipping for real: daily rescans, and your AI agent can scan and fix on its own.
- 15 apps
- Unlimited scans
- Daily rescans
- MCP server for Cursor, Claude Code and Windsurf
- API keys for CI
- 5 team seats
- Everything in Builder
side by side
What each plan includes
| Feature | Free | Builder | Pro |
|---|---|---|---|
| Apps | 1 | 3 | 15 |
| Scans per month | 3 | 100 | Unlimited |
| Live app scan (leaked keys, AI SDKs in the browser, headers, HTTPS, forms) | yes | yes | yes |
| Fix prompts for your builder | yes | yes | yes |
| GitHub repo scan (secrets, packages, Supabase RLS, Firebase rules, risky code) | no | yes | yes |
| Scan on every push | no | yes | yes |
| Automatic rescans | None | Weekly | Daily |
| Alerts (email, Slack, Discord, webhook) | no | yes | yes |
| MCP server and API keys | no | no | yes |
| Team seats | 1 | 1 | 5 |
Every plan runs every live app check and writes a fix prompt for every finding. See the full list of checks. Prices are in US dollars.
questions
Pricing questions
What counts as an app?
One live address (and its www. twin, if it has one), plus the GitHub repo you link to it. Staging and production on different addresses are two apps.
What counts as a scan?
Each live app scan or repo scan you start yourself. Automatic rescans and scans triggered by a push to GitHub do not count against your monthly number.
Is the free plan a trial?
No. It does not run out and needs no card. It covers one app and a few scans a month, which is enough to find out whether you have a problem and check that the fix worked.
Can I cancel or switch plans?
Yes, any time, from the billing page in the app. Cancelling takes effect at the end of the period you have paid for, and you drop back to the free plan rather than losing your account.
How do I pay?
By card (or another common method) through Stripe checkout. We never see or store your card number. We give at least 30 days' notice before any price change.
Do you charge in Australian dollars?
Yes. If you are in Australia, checkout charges fixed AUD prices: Builder is A$19 a month and Pro is A$45 a month, with yearly at ten months for twelve. Everyone else pays the USD prices shown here.