Free gives you full SAST, DAST and mobile analysis. Upgrade to arm shipped apps with Aegis runtime protection — plus more scans, seats and CI automation.
For solo builders getting security in early.
For small teams shipping continuously.
For scaling teams that need volume and governance.
For organisations with compliance, SSO, and scale needs.
PRICES IN USD · YEARLY BILLED ANNUALLY (2 MONTHS FREE) · TAXES ADDED WHERE APPLICABLE · CANCEL ANYTIME
SHOWN IN USD FOR YOUR REGION · INDIA IS BILLED IN ₹ · AEGIS IS ON PAID PLANS
Free covers three engines; Aegis runtime protection unlocks on paid plans. What else changes as you move up is volume, seats, CI automation, and the compliance controls larger teams need.
| Feature | Starter | Shipper | Pro | Enterprise |
|---|---|---|---|---|
| Engines | ||||
| Atlas · static analysis (SAST) | ||||
| Ares · source-aware aggressive DAST | ||||
| Shield · Android APK analysis + hardening | ||||
| Aegis · on-device runtime protection (RASP) | ||||
| Scans & seats | ||||
| Scans / engine / month | 2 | 10 | 25 | Unlimited |
| Team seats | 1 | 5 | 15 | Unlimited |
| Scan history & risk trends | 7 days | 90 days | 1 year | Unlimited |
| Scan credit top-ups | ||||
| Reports & CI/CD | ||||
| HTML & JSON reports | ||||
| CWE + OWASP / MASVS mapping | ||||
| Audit-grade PDF export | ||||
| SARIF 2.1.0 + CI build gating + PR checks | ||||
| Private-repo scanning (GitHub App) | ||||
| Slack & email alerts | ||||
| API access + tokens | ||||
| Concurrent scans | ||||
| Security, compliance & support | ||||
| SSO / SAML + RBAC | ||||
| Audit log | ||||
| Private / in-region / on-prem | ||||
| Support | Community | Priority | Dedicated + SLA | |
NEED SOMETHING IN BETWEEN? TALK TO US.
Starter (free) includes three engines — Atlas (SAST), Ares (DAST), and Shield (mobile) — with two scans of each per month. Aegis, our on-device runtime protection (RASP), is on the paid plans (Shipper and up), which also add scan volume, seats, CI gating, private-repo scanning, and history.
One scan is a single run of one engine. Ares requires a repository plus its DNS-verified staging URL; together they count as one Ares scan. Re-scanning after a fix counts as a new scan.
Anytime, in-app. Upgrades are prorated; downgrades take effect at the next cycle. There's no lock-in, and you never buy engines à la carte — a plan bundles everything at that tier.
Your code and results are never used to train models. Processing is region-aware and scan artifacts are deleted on request.
Two scans of Atlas, Ares and Shield every month — no credit card. Add Aegis when you upgrade.