Pricing
Start free. Scale when you need to.
Add automation, full chain analysis, teams, and deployment as the work demands it.
Compare
Every feature, by tier
What each plan includes. Local use of the core toolkit is free; paid tiers add runtime depth, automation, collaboration, and deployment.
| Capability | Community$0 | Pro$19/mo | Pro+$49/mo | Team$17/seat | Team+$42/seat | Enterprise$47/seat+ |
|---|---|---|---|---|---|---|
| Seats | ||||||
| Minimum seats | – | 1 | 1 | 5 | 5 | Custom |
| Core analysis | ||||||
| APK / DEX / AXML analysis | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| IR / CFG / Callgraph / XREF | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Static analysis / rules | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Taint / dataflow analysis | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Chain analysis | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| SCA (dependency scanning) | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Container security | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Native analysis | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Interfaces & output | ||||||
| CLI | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Local / offline analysis | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Text / JSON / Markdown / SARIF | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| HTML / PDF reports | – | ✓ | ✓ | ✓ | ✓ | ✓ |
| Runtime & network (DAST) | ||||||
| Runtime analysis (Frida) | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Static ↔ runtime correlation | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Network capture | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| HTTP interception (view / edit / repeater) | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Repeater-style workflow | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Bespoke runtime engine: in-house, beyond Frida | ||||||
| In-house hooking engine (runs where Frida is detected / blocked) | – | – | ✓ | – | ✓ | ✓ |
| No-repack agent delivery (hardened apps) | – | – | ✓ | – | ✓ | ✓ |
| Anti-tamper & root-detection bypass | – | – | ✓ | – | ✓ | ✓ |
| Runtime mutation (field / return / variable writes) | – | – | ✓ | – | ✓ | ✓ |
| On-device exploit verification | – | – | ✓ | – | ✓ | ✓ |
| Integration & automation | ||||||
| MCP server (read) | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| REST API: analyze from your own stack | – | ✓ | ✓ | ✓ | ✓ | ✓ |
| CI/CD security gate: fail builds on new findings | – | ✓ | ✓ | ✓ | ✓ | ✓ |
| CI/CD config & pipeline scan | – | ✓ | ✓ | ✓ | ✓ | ✓ |
| Auto-fix: generated patches + patched APK | – | ✓ | ✓ | ✓ | ✓ | ✓ |
| Offensive tooling | ||||||
| Authorized offensive assessment | Opt-in | Opt-in | Opt-in | Opt-in | Opt-in | Opt-in |
| Live behaviour override (spoof methods & return values) | – | ✓ | ✓ | ✓ | ✓ | ✓ |
| Host offense: Windows / Linux live-host | – | – | ✓ | – | ✓ | ✓ |
| Collaboration | ||||||
| Individual projects | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Shared workspace | – | – | – | ✓ | ✓ | ✓ |
| Shared findings | – | – | – | ✓ | ✓ | ✓ |
| Finding assignment / review | – | – | – | ✓ | ✓ | ✓ |
| Git-backed workspace | – | – | – | ✓ | ✓ | ✓ |
| Remediation PRs (bot fix-PRs) | – | – | – | ✓ | ✓ | ✓ |
| GitHub write & CI auto-provisioning | – | – | – | ✓ | ✓ | ✓ |
| Compliance reports | – | – | – | ✓ | ✓ | ✓ |
| Team SSO (OIDC) | – | – | – | ✓ | ✓ | ✓ |
| Team collaboration | – | – | – | ✓ | ✓ | ✓ |
| Enterprise & administration | ||||||
| Org administration | – | – | – | – | – | ✓ |
| Enterprise SSO (SAML / SCIM) | – | – | – | – | – | ✓ |
| Org-wide policies | – | – | – | – | – | ✓ |
| On-prem deployment | – | – | – | – | – | ✓ |
| Air-gapped deployment | – | – | – | – | – | ✓ |
| Customer-controlled infrastructure | – | – | – | – | – | ✓ |
| Custom integrations | – | – | – | – | – | ✓ |
| Dedicated support channel | – | – | – | – | – | ✓ |
Professional Services is quoted separately and never bundled into a subscription. Offensive tooling is strictly opt-in and for authorized testing only.