Custom, annual contract. Proposal within 2 business days.
01
365 days of attack surface monitoring
02
MSA, security questionnaires, vendor onboarding
02
MSA, security questionnaires, vendor onboarding
03
Internal network, cloud, Kubernetes, Active Directory
04
Continuous pentesting
04
Continuous pentesting
05
A named researcher in your Slack or Teams
06
PCI DSS 11.4, including segmentation testing
PRICE LIST
Every product,
one unit, one price
Module
Unit
Billed annually
per developer per month
$24
Line-by-line review and PR summaries
Custom review prompts
Fix in the IDE or ask @codeant-ai
Learns your repository
24+ languages, every Git host
per developer per month
$24
Quality gates on every pull request
Test coverage
Dead code and duplicates
Complex functions and antipatterns
Org-wide quality dashboards
24+ languages, every Git host
per developer per month
$24
Static analysis (SAST) with autofix pull requests
Open source dependencies (SCA), outdated packages, license risks
Secrets detection
SBOM generation and compliance gates
Infrastructure as code
per developer per month
$40
AI Code Review and Code Security on the same seat, $8 less than buying both.
per cloud account per month
$299
AWS, GCP and Azure, up to 2,500 resources per account
Cloud posture (CSPM), 100+ checks, common misconfigurations
VM and container image scanning
Infrastructure as code drift, Kubernetes
Cloud threat detection
One AWS account, Azure subscription or GCP project each. Larger accounts are Enterprise.
per organization per month
$599
Attack surface monitoring on 5 root domains, every subdomain included
Alerts in Slack, Teams or email the day something new is exposed
per domain per month
$99
Attack surface covers 5 root domains, every subdomain included. Each one after that is $99 per month.
per application per month
$199
Authenticated DAST and API fuzzing on each application, unlimited scans
API discovery, scheduled and on-deploy scans
per application, one time
$4,000one time
One application is one web app and the APIs it calls, up to 3 user roles, one environment (production or staging). An API with no UI counts as an application. Not included: internal network, cloud configuration, mobile apps.
500+ exploit agents run against your application
Findings within 24 hours
Report with proof of exploit, reproduction steps and the fix
Used for SOC 2, HIPAA and ISO 27001 pentesting
Black box or white box, same price. Unlimited retests for 12 months
per application, one time
$7,000one time
OSCP certified. Re-runs every finding by hand, signs the letter with their name, and walks your team through the fixes. Signed report in 5 business days.
External network pentest, all subdomains
per root domain, one time
$4,000one time
Prices in USD. Subscriptions billed annually upfront; monthly billing 20% higher. Pentests paid before the test starts. Threat actor intelligence is included in 360 and Enterprise.
FREQUENTLY ASKED QUESTIONS
Questions about
pricing.
Billing, contracts and how a pentest runs.
Is the pentest a vulnerability scan?
No. A scanner matches signatures and reports possibilities. Our agents attempt the exploit and report only what worked, with the proof. Add a researcher and every finding is confirmed by hand as well.