Pricing
Your first repository is free — the full pipeline, proof-of-exploit included. After that, a one-off managed assessment is $199, or $49/month runs it yourself in your editor with unlimited repositories. Larger teams license an attack-surface envelope. Public prices, no demo wall.
Self-serve
Start free and move up only when you need to — each step adds a capability, not just volume. Public prices, no demo call.
$0
Your first repository, scanned by the full pipeline — proof-of-exploit included. Re-scan it any time. No card.
Scan a repository$199 / scan
We run a full assessment on demand — nothing to install, no model key. For before a release or ahead of an audit.
Order a scan$49 / month
Run it yourself, in your editor, on your own model key. Unlimited repositories and scans, plus CI/CD gates. Cancel anytime.
Start the subscriptionOn-prem
On-premises or air-gapped, SSO, and compliance — inference included, so no code ever leaves your network.
Talk to usYou license an attack-surface envelope — repositories, live targets, hosts, cloud accounts — and scans inside it are unlimited. What’s metered is concurrent lanes. Network testing needs a runner inside your perimeter, so it starts at Business.
$24,000 / yr
Application security for a product team shipping daily. Runs in Sekura cloud, wired into your pipeline.
Talk to us›$60,000 / yr
Network and application security together, deployed in your own cloud. Replaces a network validation tool, a CSPM, and an annual pentest.
Talk to us›From $120,000 / yr
On-premises or air-gapped, with inference included. No model contract, no GPU operations, no code leaving your network.
Talk to us›What we meter
Charging per scan makes teams test less, which defeats the point of continuous validation. So we don’t. We meter the thing that actually consumes compute: how many scans run at once. A full scan costs us between $0.20 and $2.00 — unlimited scanning is arithmetic, not a launch offer.
No. The scanner runs entirely in your GitHub Actions runner. Sekura sees prompts and responses to the LLM proxy but never your repository contents.
By attack surface envelope, not per scan. You license a number of repositories, live targets and networks, and scans inside that envelope are unlimited. What is metered is concurrent lanes — how many scans run at the same time.
Yes. Business deploys into your own cloud and Enterprise runs on-premises, including air-gapped networks. Network testing requires a runner inside the perimeter it is testing, which is why it starts at Business.
One workflow file gets added to your repo on install. Edit it freely; running `npx sekura ci-setup` again will not overwrite your changes.