Corgea
Verified Oct 2, 2026 ActiveAI-native application security platform that scans code, finds logic and auth flaws, and writes fixes developers can apply.
Listed on EffectHub ·
Pricing
- Pricing model
- Freemium
- Paid options from
- $39/seat/mo
- Billing
- Per seat, monthly
Free plan covers 2 team members and 10 repositories with core scanning. Growth is $39 per developer per month with a 5-seat minimum; Scale is $49 per developer per month with a 20-seat minimum; Enterprise is custom. A developer seat is a contributor active in the last 90 days, and new accounts get a 14-day Growth trial.
Use tool ↗About Corgea
Corgea combines AI-driven static analysis with dependency, container, infrastructure-as-code and secrets scanning in one application-security platform. Its scanner looks for logic flaws and broken authentication as well as classic issues, and generates autofix suggestions that arrive as pull-request comments, IDE hints or tickets. Newer modules add autonomous pentesting, design review and a registry for agent skills. It integrates with GitHub, GitLab, Azure DevOps and Bitbucket, and is built for security engineers and developers at software companies.
- Platforms
- Web · API · VS Code extension
- API
- Yes
- Last verified
- Oct 2, 2026
Verified sources
- Pricing: Free, Growth $39 and Scale $49 per developer per month, Enterprise custom; seat minimumscorgea.com ↗
- AI SAST, scanning modules, pentesting and integrations described on the product sitecorgea.com ↗
- YC Summer 2023 company founded by Ahmad Sadeddin, San Franciscoycombinator.com ↗
Is Corgea legit?
We don’t label tools safe or unsafe. Below are the records we checked ourselves, each with the date we read it.
- Last checked
- Oct 2, 2026The site answered
- On the market since
- 2023The vendor's own material, read by us
- Operated by
- Corgea, United StatesOur research, card verified Oct 2, 2026
Pros & cons of Corgea
A developer-oriented AppSec platform whose pitch is that findings come with fixes rather than just alerts. The free plan and public per-seat prices make it easy to evaluate with a real repository. Procurement-heavy teams should plan for the 5-seat and 20-seat minimums on the paid tiers.
Pros
- Free tier covers AI SAST, dependency, container, IaC and secrets scanning
- Public per-developer prices
- Autofix suggestions across pull requests, IDE and ticketing tools
- SOC 2 Type II controls stated for handling customer code
Cons
- Free plan limited to two people and ten repositories
- Paid tiers carry seat minimums
- Accuracy figures such as fewer false positives are vendor claims
Best for
- Engineering teams that want AI-written fixes attached to security findings
- Startups needing SAST, secrets and dependency scanning in one tool
- Security teams automating pull-request scanning across many repositories
Not for
- Solo developers who want paid features without seat minimums
- Organizations that need a decades-old vendor with a long audit history
Watch out: Seats are counted by contributing developers over the last 90 days and Growth requires at least five, so the real monthly bill can be higher than a small team expects.
Top alternatives to Corgea
Corgea head-to-head
Side-by-side fact sheets against the competitors our research or their makers name — pricing, platforms, API and both verdicts on one page.