The Aevral launch-updates list, explained

What you are joining

An email list, collected through a hosted form, used for one thing: product updates by email, like new scan classes and new surfaces. Joining does not reserve a price, access, or a contract. The product itself is self-serve without the list: install https://github.com/apps/aevral and log in to the console whenever you want. If you would rather talk to a human first, the contact form exists for exactly that, and nothing on this site requires an account to read.

What is live today, in order of signup

Install the GitHub App on any account, sign in to the console with GitHub (it connects the install), and run self-serve scans per the published pricing: authorization, IDOR, and business-logic access control on the default branch, per organization, USD 0 for authorized public repos, then the paid org tiers.

Today there is also an aevr_ API key from the console Developer API page and a start-scan request, so the console is one client among possible others. The PR security review sits beside it, live on install: installing the App starts reviews. An MCP server is planned after that, and there is no live MCP endpoint today.

What stays true

Findings are leads with evidence, not confirmations. No validation pass runs on findings, no suggested diff is applied for you, and a scan is not a clean bill of health. Priced by organization, not by seat, self-serve from USD 0. Public repositories keep their free lane: one authorized scan per calendar month, and PR review free at 500 reviews per organization per month, live on install.

If you need us

The contact form reaches a human at the company behind Aevral, Better ISMS, the same people behind ISMS Copilot. Waitlist or not, the door is the same.