Pay once for a report. Or keep every deploy attacked.
A report attacks one app once, with proof of every leak and the fix for your agent. A plan keeps attacking it on every deploy, keeps retests open and shows customers what was tested. The preview stays free. Prices exclude VAT.
Report
€49once
No subscription, nothing renews
For a launch, or before you hand an app to a client.
- 1 app, 1 full attack run
- Proof for every finding
- Fix prompts and MCP for your coding agent
- Retests for 7 days to confirm fixes
- PDF report of the findings
Costs less than one report
Maker
€29/ month
or €290 a year, 2 months free
For a founder shipping a few apps.
- 5 apps, 2 members
- Every deploy attacked, CI check
- Attacked again every week or month
- Unlimited retests
- Trust page, badge, Slack alerts
Team
€99/ month
or €990 a year, 2 months free
For agencies and small teams.
- 25 apps, 10 members
- Everything in Maker
- Your brand on reports and trust pages
- Every app deployed on Vercel, Netlify or Supabase found
More than 25 apps, or every app your company builds? Talk to us
| Compare | Report €49 once | Maker €29 / month | Team €99 / month |
|---|---|---|---|
| Apps | 1 | 5 | 25 |
| Members | 1 | 2 | 10 |
| Full attack runs | 1 | 200 a month | 1,000 a month |
| Proof for every finding | |||
| Fix prompts and MCP for your agent | |||
| PDF report of the findings | |||
| Retests of a finding | 7 days | Unlimited | Unlimited |
| Every deploy attacked, CI check | – | ||
| Attacked again every week or month | – | ||
| New attacks run on your apps as they are added | – | ||
| Public trust page and badge | – | ||
| Slack alerts | – | ||
| Your brand on reports and trust pages | – | – | |
| Every app deployed on Vercel, Netlify or Supabase found | – | – |
Every report and plan: proof for every finding, fix prompts for Lovable, Bolt, Cursor and Claude Code, the MCP server for your agent, and the PDF report.
Billing questions, plainly answered.
Anything else? Talk to us, or write to [email protected].
What do I get with a one-time report?
One full attack run on one app (112 attacks and 291 individual checks today, about a minute), every finding with its redacted proof and a fix prompt for Lovable, Bolt, Cursor or Claude Code, retests of those findings for 7 days so you can confirm each fix, and the full report as a PDF. It is yours to keep. Nothing renews.
Is anything free?
The preview is: paste any address and see what every visitor's browser already downloads, such as the backend, its keys and the tables named in the code, with no account and nothing sent to the backend. The attack itself starts with a report or a plan.
Report or plan: which one do I need?
A report answers "what can a stranger do to my app today?" once. A plan keeps answering it: every deploy and preview is attacked again, retests never close, new attacks run on your apps as they join the library, and the trust page shows customers what was tested. Maker costs less a month (€29) than one report (€49).
What counts as an app?
One deployed address, such as your-app.lovable.app or app.example.com, with the backend it talks to. Preview deploys of the same app are attacked as part of it and don't count as extra apps.
What if the attack can't run?
Nothing is used up. If your app is down or unreachable when the attack starts, the report or the plan's run is given back, and you start again once the app answers.
How do upgrades, downgrades and cancellations work?
Change the plan from Settings, Plan and billing. An upgrade is charged the difference today; a downgrade is credited on your next invoice. When you cancel, the plan stays on until the end of the period you paid for. Your reports and findings stay after that.
Who handles payments, invoices and VAT?
Polar, our merchant of record. It takes the card payment, issues the invoice and handles VAT, so business customers in the EU get a proper VAT invoice.
Do you offer agency or volume pricing?
Team covers 25 apps and 10 members, with your brand on reports and trust pages, which suits most agencies. For more apps, or every app your company builds, talk to us.