Aevral

Aevral is a GitHub security app built as an alternative to Claude Security. Two products, one install, neither requires the other.

Whole-repo scans: deep at-rest scans of your repository for authorization, IDOR, and business-logic flaws. Every finding is a lead with evidence from your own code. Coverage verdicts are honest: an incomplete scan says so. You get a fix prompt for Claude Code, Cursor, or Codex.

PR review: a reviewer on every pull request, opt-in per organization. A Check plus inline comments on the added lines, for authorization and business-logic flaws. Nothing merges without you.

• Public repositories scan free
• 25 free private PR reviews every month, no card
• Open-source models, hosted in the US or the EU
• Priced per organization, never per seat
  Scan plans (EUR per organization per month, excluding VAT):
• Public repositories: 0, 1 authorized public-repo scan per calendar month
• Team: 99, 4 scans then 29 per extra scan
• Business: 399, 16 scans then 19
• Scale: 1,699, 100 scans then 17
• Enterprise: by quote
  PR review plans (USD per organization per month, excluding VAT):
• Free: 0, 25 private reviews per month
• Starter: 19, 100 included then 0.49 per extra review
• Pro: 99, 500 included then 0.49
• Business: 249, 2,000 included then 0.49
  Built by ISMS Copilot.

FEATURES
• Repo scanning: It deeply checks your whole codebase for complex security flaws like IDOR and logic errors.
• Pull request reviews: It acts as an automated reviewer that spots security issues in your code changes before you merge.
• Fix assistance: It gives you direct code prompts to help you fix any vulnerabilities it finds using your preferred AI tools.
• Transparent reporting: It tells you honestly if a scan was incomplete so you always know exactly how much of your code is covered.
• Flexible hosting: You can choose to have your data processed in either the US or the EU to fit your needs.
• Simple pricing: You pay a flat fee for your whole organization instead of getting charged per user seat.