Two products. Priced per organization, never per seat.

Product 1

Whole-repo scans

A security researcher over the default-branch snapshot of a repository you authorized, started manually or on a paid recurring schedule. You get a GitHub Check, a console report with evidence, and a fix prompt for your coding agent.

Live today, self-serve. Team, Business and Scale can be bought in the console. Public repositories is free. Enterprise is by quote.

Public repositories.

1 authorized public-repo scan per calendar month. Aevral itself is not open source. Authorization is required, and findings are not auto-published.

Team.

Private repositories start here, at €99 per organization per month.

Enterprise.

Quoted from €3,300 per month equivalent for 200 scans, annual commitment, invoice billing. Not self-serve: a quote is a conversation with us. The Enterprise console features (SSO / SAML, RBAC, audit log, multiple GitHub organizations, invoice / PO tooling) are not shipped yet.

Every scan plan carries the same product: whole-repo authorization / IDOR / business-logic scan on a default branch, GitHub Check and console report, fix prompt, open-source models hosted in the US or the EU. Team, Business and Scale differ by included volume and by the price of an extra scan. Extras coming soon on Business and Scale: directory scope, Slack or webhook, CSV / Markdown export, documented dismissals. Team, Business and Scale include recurring scans using your included allowance.

This button joins the launch-updates list, which does not reserve a price or access. To use Aevral today: install the GitHub App, then log in to the console, claim your organization, and press Scan.

Product 2, opt-in per organization

PR security review

A reviewer for the pull requests of an organization that opted in: a Check on the head commit of each pull request it reviews, with inline comments pinned to the added lines when there is a grounded finding, for authorization, IDOR and business-logic flaws. Pull requests past the allowance and oversized ones get a neutral Check and no review; a run that fails before posting is not counted.

PR review is live and opt-in: claiming a new organization starts PR reviews on (the same default as Setup). Installing the App without claiming never authorizes reviews. Setup Complete can still turn them off. Existing opt-outs stay off, and reviews can be disabled at any time. Paid PR plans are live in the console.

Public repositories are always free. Enabling PR review starts a 14-day trial with the first pull request Aevral processes after opt-in: private reviews are free up to 500, and the trial ends at 14 days or 500 reviews, whichever comes first. After the trial, 25 private reviews a month are free (trial-covered reviews do not consume the subsequent Free allowance); past that, a pull request gets a neutral Check and no review until the next month. No card. Paid plans are purchasable in the console.

The paid tiers are volume allowances of the same review; they differ by included reviews, not by features. PR security review is Aevral's second product, priced on its own in USD per organization. It needs no scan plan: an organization owner or admin enables it from the console, on an organization whose App install has accepted Pull-requests write. Reviews are never counted as scans, and scans are never counted as reviews. Paid plans stop at the included allowance unless an owner explicitly enables $0.49 excess reviews. No automatic excess-review billing by default.

This button joins the launch-updates list, which does not reserve a price or access. To use Aevral today: install the GitHub App, then log in to the console, enable PR review from the Reviews page.