Codebase scope
The repositories, components, services and paths included in the review.
Pricing
A scoped quote for a defined codebase
Every engagement is quoted against the agreed codebase, in-scope components, technologies, complexity and review depth. Human assessment of every candidate finding and the final report are included.
Request a scoped quoteWhat shapes the quote
Technology and complexity
The languages, frameworks, architecture and security-sensitive workflows involved.
Review requirements
The review depth, reporting needs, delivery context and any separately scoped follow-up review.
Common engagement scopes
Focused component review
A targeted review of a security-critical service, feature or defined set of source paths.
Application repository review
A broader review of an agreed application repository at one exact commit.
Follow-up review
A separately scoped review of an updated commit after changes have been made.
Every engagement includes
- Agreed repository and in-scope code surface, tied to one exact commit SHA
- Two independent AI security reviews
- Deterministic consolidation with the original reviewer findings retained
- Human assessment of every candidate, with final severity and recorded rationale
- Confirmed findings with evidence, remediation guidance, coverage and limitations
- One human-approved report
What we need to prepare a quote
- Repository or application type
- Approximate codebase size, or “not sure”
- Primary languages and frameworks
- Components, services or paths that need review
- Purpose of the review
- Preferred timing
- Whether a follow-up review may be required
Tell us what needs to be reviewed
Share the application context and the outcome you need. We will recommend an appropriate scope and return a clear engagement quote.
Request a scoped quote