One price for the whole organization.

Every plan carries a scanning allowance the whole team draws from. Seats come with the plan, and an extra seat buys more of that allowance.

Free

The whole loop, once.

$0a month

No card, no trial clock.

Start free
AI allowance
5,000,000 model tokens once
Seats
2
Repositories
2
  • Configured checks: SAST, dependencies, secrets, IaC, code quality and SBOM
  • Research citations when a match is available
  • Fixes and proofs
  • Manual scans

Plus

It runs itself.

$100a month

Billed monthly.

Choose Plus
AI allowance
12,000,000 model tokens per month
Seats
5
Repositories
10

Everything in Free, plus

  • Scan every push
  • PR source scans (partial coverage)
  • Scheduled scans, daily

Max

The corpus watches your code.

$400a month

Billed monthly.

Choose Max
AI allowance
65,000,000 model tokens per month
Seats
25
Repositories
Unlimited

Everything in Pro, plus

  • Immunity Watch
  • Hyper immunity tests in the sandbox
  • Scheduled scans, hourly
  • SSO and audit log export

Model tokens measure shared AI input and output for scans, fixes and proofs. They are not a cash balance or a fixed number of scans. Free is granted once; paid allowances refill monthly, including on yearly billing. No metered overage is charged.

Extra seats are $10 a month, and each one adds capacity to the shared pool rather than carving it up per person.

What changes as the tier rises.

Every value below is the limit the product enforces, not a summary of it.

What each plan includes, compared
FreePlusProMax
Allowance
Shared AI allowance5,000,000 model tokens once12,000,000 model tokens per month65,000,000 model tokens per month
RefillsNeverMonthlyMonthly
Scale
Repositories210Unlimited
Seats included2525
Extra seatsNot available$10 a month$10 a month
Scanning
Scheduled scansManual onlyDailyHourly
Scan every pushNot includedYesYes
PR source scans (changed files only)Not includedPR source scans (partial coverage)PR source scans (partial coverage)
Max depthNot includedNot includedNo run cap, shared token allowance
Container imagesNot includedNot includedYes
Platform
Immunity WatchNot includedNot includedYes
Hyper immunity testsNot includedNot includedYes
SSO and audit log exportNot includedNot includedYes

What the plan actually means.

The answers that decide whether a plan fits, stated before you pay for it.

One organization. Cefense bills per organization, the way Vercel bills per team and GitHub bills per organization. The organization is the tenant, the payer, and the meter. An account can hold a paid organization and a free one at the same time, and each is metered on its own.