// PRICING
Every plan includes continuous analysis, prioritized findings, and remediation guidance. What changes is how much of your environment is covered, how often it is analyzed, and how much human verification is included.
A real security baseline for a single application.
Billed monthly
Start with an assessmentBest for teams of 3–8 developers shipping one product.
Continuous coverage across the services you actually run.
Billed monthly
Start with an assessmentBest for teams of 8–20 developers running multiple services.
Continuous analysis with human verification where it counts.
Billed monthly
Talk to securityBest for teams of 20+ developers, or anyone handling regulated or high-value data.
Larger environments, custom data-retention terms, security questionnaires, and procurement review are handled directly. We will tell you honestly if Veyra is not the right fit for your stage.
A baseline assessment establishes what is actually exposed today, produces a formal report you can share with your board or your customers, and configures continuous monitoring. The full cost is credited toward your first three months if you subscribe within 30 days.
≈5 business days
≈7 business days
≈10 business days
Start any plan within 30 days of receiving your assessment report and the entire assessment fee is applied to your first three months. The assessment is designed to be the beginning of continuous coverage, not a one-off report that ages badly.
| Capability | Essential | Growth | Advanced |
|---|---|---|---|
| Applications | 1 | 3 | 10 |
| Repositories | 1 | 5 | 25 |
| Developers | Up to 5 | Up to 15 | Unlimited |
| Analysis frequency | Weekly | Daily + on push | Continuous |
| Static analysis | Included | Included | Included |
| Dependency monitoring | Included | Included | Included |
| Secret detection | Included | Included | Included |
| API route inventory | Included | Included | Included |
| API security analysis | Not included | Included | Included |
| Attack surface monitoring | Not included | Included | Included |
| Correlation & attack paths | Not included | Standard | Full |
| Remediation verification | Included | Included | Included |
| GitHub issue creation | Not included | Included | Included |
| Slack / Teams alerts | Not included | Included | Included |
| Human verification | Not included | Not included | 10 / quarter |
| Executive reporting | Not included | Not included | Included |
| Custom assessment policies | Not included | Not included | Included |
| Support | Priority email | Named contact, 1 business day | |
| Finding history | 90 days | 1 year | 2 years |
Priced so that growing past a plan boundary costs what it should, rather than forcing a jump to the next tier.
| Add-on | Price | What it covers |
|---|---|---|
| Additional application | $99 / month | Beyond the applications included in your plan. |
| Additional repository | $49 / month | Beyond the repositories included in your plan. |
| Human verification pack | $750 one-time | Manual verification of 5 high or critical findings by a security engineer. |
| Point-in-time assessment | from $1,500 | A scoped assessment and formal report, outside your normal cadence. |
Veyra is working with a limited group of growing software companies to refine continuous application security for teams without dedicated AppSec resources. Founding participants receive 50% off for twelve months, locked for as long as the subscription runs.
No public testimonial is required, and participants are never described as customers unless they become customers.
A baseline assessment takes about a week and tells you where you stand — before you commit to anything ongoing.
Assessment fees are credited in full toward your first three months.