Scan the repository.

Press Scan in the Aevral console and Aevral reads the default-branch snapshot of your repository: cross-file context, authorization rules, the business logic behind who has access to what. You get an advisory GitHub Check on the scanned commit, a console report with evidence for every finding, and a fix prompt to copy when there is a finding.

How it runs

Install: Install the Aevral GitHub App. Contents read, Metadata, Checks write. Nothing more for this product.
Scan: Complete Setup to start the selected first scan, press Scan for a manual run, or configure recurring scans on a paid scan plan. Aevral reads the default-branch snapshot.
Read: A GitHub Check on the scanned commit, plus the full report in the console. Each finding carries its evidence. A finding is a lead, not a confirmation.
Hand off: Apply the suggested diff when a finding carries one, or copy the fix prompt into Claude Code, Cursor, or Codex. A human reviews before merge; Aevral never applies or merges it.

Today Aevral scans authorization, IDOR, and business-logic access control only. The wider class list is PR review, live on install, on the diff: access control, business logic, SQL and command injection, XSS, SSRF, path traversal, unsafe deserialization, token and session flaws, and LLM-integration risks.

What it costs

Live today, self-serve. Team, Business and Scale can be bought in the console. Public repositories is free. Enterprise is by quote.

USD per organization per month, excluding VAT.
Plan	Price	Included	Extra scan	Availability
Public repositories	$0per org / month	1 authorized public-repo scan per calendar month	None. A second public scan that month is refused; the paid plans are the path.	Free
Team	$99per org / month	4 default-branch scans	$29 per scan, opt-in	Self-serve
Business	$399per org / month	16 default-branch scans	$19 per scan, opt-in	Self-serve
Scale	$1,699per org / month	100 default-branch scans	$17 per scan, opt-in	Self-serve
Enterprise	By quotefrom $3,300 / month equivalent	200 scans and up	$16.50 per scan minimum	By quote: request one

Public repositories.: 1 authorized public-repo scan per calendar month. Aevral itself is not open source. Authorization is required, and findings are not auto-published.
Team.: Private repositories start here, at $99 per organization per month.
Enterprise.: Quoted from $3,300 per month equivalent for 200 scans, annual commitment, invoice billing. Not self-serve: a quote is a conversation with us. The Enterprise console features (SSO / SAML, RBAC, audit log, multiple GitHub organizations, invoice / PO tooling) are not shipped yet.

B2B. All prices excluding VAT. Extra scans are opt-in: the per-scan price and the billable-scan definition are shown before purchase, and an owner-set monthly cap on extra-scan spend applies in the console. No extra spend without explicit authorization.

What Aevral does not do

No auto-applied fixes. A finding can carry a suggested diff you apply, and the fix prompt is yours to hand to the agent you already use; Aevral never applies or merges it.
No confirmation pass on findings. A scan is not a clean bill of health.
Not a general SAST. Today Aevral scans access control and business logic. Not memory corruption, not secret or dependency scanning.
Does not replace SAST, SCA, secrets detection, or a pentest.

A wider reading on the diff is a separate product: PR security review, live on install, with no scan plan required; paid PR plans are live in the console. See the PR review product.

Security review, handled.

Install the GitHub App and PR review starts on. Sign in with GitHub to connect it, then press Scan for the repository you already have.

Install the GitHub App Log in Sign up

For professional use. By installing, you confirm you can act for the account or organization that owns it, and you accept the Terms and DPA on its behalf.