Pricing

Start free. Pay only when you scale.

Your first repository is free — the full pipeline, proof-of-exploit included. After that, a one-off managed assessment is $199, or $49/month runs it yourself in your editor with unlimited repositories. Larger teams license an attack-surface envelope. Public prices, no demo wall.

Self-serve

Three ways to start

Start free and move up only when you need to — each step adds a capability, not just volume. Public prices, no demo call.

Free scan

$0

Your first repository, scanned by the full pipeline — proof-of-exploit included. Re-scan it any time. No card.

Scan a repository

Developer

$49 / month

Run it yourself, in your editor, on your own model key. Unlimited repositories and scans, plus CI/CD gates. Cancel anytime.

Start the subscription

Enterprise

On-prem

On-premises or air-gapped, SSO, and compliance — inference included, so no code ever leaves your network.

Talk to us

Or license an envelope for the whole team.

You license an attack-surface envelope — repositories, live targets, hosts, cloud accounts — and scans inside it are unlimited. What’s metered is concurrent lanes. Network testing needs a runner inside your perimeter, so it starts at Business.

Team

$24,000 / yr

Application security for a product team shipping daily. Runs in Sekura cloud, wired into your pipeline.

Talk to us
Repositories
10
Live targets
3
Cloud accounts
1
Lanes
2
Continuous scans
Included
Network testing
Both include network security

Business

$60,000 / yr

Network and application security together, deployed in your own cloud. Replaces a network validation tool, a CSPM, and an annual pentest.

Talk to us
Repositories
40
Live targets
15
Hosts
512
Cloud accounts
3
Lanes
6
Continuous scans
Included
Network testing
Included

Enterprise

From $120,000 / yr

On-premises or air-gapped, with inference included. No model contract, no GPU operations, no code leaving your network.

Talk to us
Repositories
150+
Live targets
60+
Hosts
4,096+
Cloud accounts
15+
Lanes
20+
Continuous scans
Included
Network testing
Included

What we meter

Unlimited scans. Metered lanes.

Charging per scan makes teams test less, which defeats the point of continuous validation. So we don’t. We meter the thing that actually consumes compute: how many scans run at once. A full scan costs us between $0.20 and $2.00 — unlimited scanning is arithmetic, not a launch offer.

Common questions

Do you see my source code?

No. The scanner runs entirely in your GitHub Actions runner. Sekura sees prompts and responses to the LLM proxy but never your repository contents.

How is Sekura priced?

By attack surface envelope, not per scan. You license a number of repositories, live targets and networks, and scans inside that envelope are unlimited. What is metered is concurrent lanes — how many scans run at the same time.

Can I run on a self-hosted runner?

Yes. Business deploys into your own cloud and Enterprise runs on-premises, including air-gapped networks. Network testing requires a runner inside the perimeter it is testing, which is why it starts at Business.

What about my existing CI pipeline?

One workflow file gets added to your repo on install. Edit it freely; running `npx sekura ci-setup` again will not overwrite your changes.