Simple, one-time pricing
Start free. Pay once when you need proof your security actually works. No subscription, no surprises.
Free scan
$0 forever
A fast, passive look at your public surface. No ownership proof needed.
- Passive, read-only scan
- Leaked-secret detection in JS bundles
- Security headers & TLS check
- Exposed .env / .git / source-map checks
- Supabase project fingerprint
- Severity score & grade
Deep Check
Most popular$39 one-time
Ownership-gated active tests that prove your rules enforce. Includes one free rescan.
- Everything in the free scan
- Cross-user RLS read & write tests (real accounts)
- Anonymous-write tests with the anon key
- Public storage bucket checks
- service_role leak verification
- Stripe trust-boundary heuristic
- Plain-English report + copy-paste fixes
- Emailed report, stored in your dashboard
- One free rescan included
Monitoring (continuous re-checks) is on our roadmap. Today, every Deep Check is a one-time purchase with a free rescan so you can confirm your fixes landed.