Aevral

Aevral is a GitHub security app built as an alternative to Claude Security. Two products, one install, neither requires the other.

Whole-repo scans: deep at-rest scans of your repository for authorization, IDOR, and business-logic flaws. Every finding is a lead with evidence from your own code. Coverage verdicts are honest: an incomplete scan says so. You get a fix prompt for Claude Code, Cursor, or Codex.

PR review: a reviewer on every pull request, opt-in per organization. A Check plus inline comments on the added lines, for authorization and business-logic flaws. Nothing merges without you.

- Public repositories scan free

- 25 free private PR reviews every month, no card

- Open-source models, hosted in the US or the EU

- Priced per organization, never per seat

Scan plans (EUR per organization per month, excluding VAT):

- Public repositories: 0, 1 authorized public-repo scan per calendar month

- Team: 99, 4 scans then 29 per extra scan

- Business: 399, 16 scans then 19

- Scale: 1,699, 100 scans then 17

- Enterprise: by quote

PR review plans (USD per organization per month, excluding VAT):

- Free: 0, 25 private reviews per month

- Starter: 19, 100 included then 0.49 per extra review

- Pro: 99, 500 included then 0.49

- Business: 249, 2,000 included then 0.49

Built by ISMS Copilot.

FEATURES

• Repo scanning: It deeply checks your whole codebase for complex security flaws like IDOR and logic errors.

• Pull request reviews: It acts as an automated reviewer that spots security issues in your code changes before you merge.

• Fix assistance: It gives you direct code prompts to help you fix any vulnerabilities it finds using your preferred AI tools.

• Transparent reporting: It tells you honestly if a scan was incomplete so you always know exactly how much of your code is covered.

• Flexible hosting: You can choose to have your data processed in either the US or the EU to fit your needs.

• Simple pricing: You pay a flat fee for your whole organization instead of getting charged per user seat.