Continuous, pentest-grade application security

    Continuous, pentest-grade testing for every app you ship, with Pro, Startup and Enterprise plans for founders, growing teams and security partners.

    Security for AI coding platforms and tools

    • Security for Cursor — autonomous AppSec and auto-fix.
    • Security for Bolt — autonomous AppSec and auto-fix.
    • Security for v0 — autonomous AppSec and auto-fix.
    • Security for Replit — autonomous AppSec and auto-fix.
    • Security for Windsurf — autonomous AppSec and auto-fix.
    • Security for Claude Code — autonomous AppSec and auto-fix.
    • Security for GitHub Copilot — autonomous AppSec and auto-fix.
    • Security for Devin — autonomous AppSec and auto-fix.
    • Security for Codeium — autonomous AppSec and auto-fix.
    • Security for Aider — autonomous AppSec and auto-fix.
    • Security for StackBlitz — autonomous AppSec and auto-fix.
    • Security for Vercel v0 — autonomous AppSec and auto-fix.
    • Security for Continue — autonomous AppSec and auto-fix.
    • Security for Tabnine — autonomous AppSec and auto-fix.
    • Security for Zed — autonomous AppSec and auto-fix.
    • Security for Trae — autonomous AppSec and auto-fix.

    Frequently asked questions

    Which plan is right for my team?
    Pro is for solo founders in production, Startup supports growing teams and first compliance asks, and Enterprise serves security teams and partners managing a portfolio of apps.
    What does Auto-Fix include?
    Auto-Fix generates a vetted code patch for confirmed vulnerabilities and ships it as a pull request, or pushes it directly into AI coding tools like Cursor, Claude Code, GitHub Copilot, Replit, and Windsurf.
    Does Perfai Security support MSSPs and agencies?
    Yes. The Enterprise tier is multi-tenant with SSO/SAML, RBAC/ABAC, dedicated IPs, audit exports, and custom SLAs — built for MSSPs and agencies securing many AI-built apps.
    Which AI coding platforms does Perfai Security cover?
    Perfai Security secures apps built with Cursor, Bolt, v0, Replit, Windsurf, Claude Code, GitHub Copilot, Devin, Codeium, Aider, StackBlitz, and Vercel v0.
    How is Perfai Security different from a traditional pentest or DAST?
    Perfai Security is continuous and agentic. Autonomous agents discover, exploit, and remediate around the clock — replacing point-in-time pentests and noisy static scans.

    Plans

    Continuous, pentest-grade testing for every app you ship.

    Pro
    Self-serve

    For solo founders in production

    • 350 credits/mo · 1 Medium app
    • + Fix Agent (Replit, Lovable, Base44)
    • + Perfai Chatbot
    • Email support

    Pricing shown at signup

    Start Now
    ★ Most popular
    Startup
    Free trial

    For startups & first compliance asks

    • 1,500 credits/mo · 1 Large app
    • + Fix Agent (Cursor, Claude Code, Devin)
    • + Compliance reports, Slack & Teams
    • Priority email support

    15-day free trial — no credit card required

    Start Free Trial
    Enterprise
    Custom

    For Security teams & Partners

    • Custom credits · Portfolio-wide
    • Private deployment, multi-tenancy, CI/CD gating
    • Full platform range, API access
    • Dedicated support contact
    Book a demo

    Compare to a manual pentest

    Manual pentest

    • Point-in-time, stale after the next release
    • Weeks to schedule and deliver
    • PDF of findings, fixes are on you
    • Repeated cost every engagement

    Perfai

    • Continuous testing on every release
    • Results in hours
    • Fix Agent patches and retests automatically
    • Compliance-ready reports included

    Start free trial — no credit card required

    Start free trial
    FeatureProStartupEnterprise
    Plan Usage
    Credits / mo3501,500Custom
    App limit1 Medium app1 Large appPortfolio-wide
    Collaborators25Custom
    Perfai Chatbot
    In-page assistant
    Vision Agent
    UI + API endpoints100150Unlimited
    RolesUp to 3Up to 6Up to 24
    Cloud ComputerMediumLargeDedicated / custom
    Autonomous App MappingBi-weeklyWeeklyContinuous
    App typesB2C+B2B+Legacy webapps
    Auth supported+ Social login+ SSO, MFASame
    Mapping recording
    Security Agent
    Coverage90+ categoriesSameSame
    Autonomous TestingBi-weeklyWeeklyContinuous
    Findings shownUnlimited, full detailUnlimited, full detailUnlimited, full detail
    Fix Agent
    Auto-fix + retestReplit, Lovable, Base44Cursor, Claude Code, DevinFull platform range
    Tooling
    IDE / chat access—Slack, TeamsSlack, Teams + Ticketing, API access
    MCP support
    AI & code agent integrations——
    CI/CD Gating——
    Deployment & Access
    Private Agents——
    On-premises deployment——
    Multi-tenancy——
    Reports
    Security reports—Compliance-readySame
    SupportEmailPriority emailDedicated contact

    UI + API endpoints are counted together.

    Start securing your apps today.

    Discover vulnerabilities before attackers or bug bounty hunters do.