Pricing
Simple pricing. Start free.
The Free plan includes the full analyzer, forever. Plans for teams are coming soon.
Free
Available nowThe full analyzer for individual engineers. Free forever.
- Browser analyzer for files, folders and repositories
- Unlimited analyses
- Full path traces with the model boundary marked
- Fix guidance on every open path
- JSON and written report export
- OWASP LLM Top 10 and CWE mapping
- Community support
Developer
Coming soonFor an individual engineer or a single agent in production.
- Everything in Free
- 1 developer seat
- Up to 5 projects
- CLI and CI severity thresholds
- Personal report history
- Community support
Team
Coming soonFor a team shipping agents on a shared codebase.
- Everything in Developer
- Unlimited projects and repositories
- Shared report history and path timeline
- Pull-request comments on new and closed paths
- Per-repository policy thresholds
- SARIF export and code scanning integration
- Ownership routing for open paths
- Email support, one business day
Business
Coming soonFor organizations running many agents across many teams.
- Everything in Team
- Organization-wide path dashboard and trends
- SSO with Google, Microsoft and Okta
- Role-based access and audit trail
- Custom input surfaces, actions and controls
- Release evidence export for audits
- Priority support with a named contact
Enterprise
For regulated environments and code that cannot leave the network.
- Self-hosted or air-gapped deployment
- Private detector packs for internal frameworks
- Architecture review with our research team
- Contractual SLAs and security review support
Prices are in USD and exclude local taxes. Annual billing is charged yearly and saves roughly 20%.
Compare plans
| Capability | Free | DeveloperComing soon | TeamComing soon | BusinessComing soon | Enterprise |
|---|---|---|---|---|---|
| Analysis | |||||
| Browser analyzer | Included | Included | Included | Included | Included |
| Unlimited analyses | Included | Included | Included | Included | Included |
| Full path traces and fixes | Included | Included | Included | Included | Included |
| Projects | Not included | 5 | Unlimited | Unlimited | Unlimited |
| Custom detectors | Not included | Not included | Not included | Included | Private packs |
| Workflow | |||||
| JSON and report export | Included | Included | Included | Included | Included |
| CLI and CI thresholds | Not included | Included | Included | Included | Included |
| Report history | Not included | Personal | Shared | Organization-wide | Organization-wide |
| Pull-request comments | Not included | Not included | Included | Included | Included |
| SARIF and code scanning | Not included | Not included | Included | Included | Included |
| Governance | |||||
| SSO | Not included | Not included | Not included | Included | Included |
| Role-based access and audit trail | Not included | Not included | Not included | Included | Included |
| Release evidence export | Not included | Not included | Not included | Included | Included |
| Self-hosted or air-gapped | Not included | Not included | Not included | Not included | Included |
| Support | |||||
| Community support | Included | Included | Included | Included | Included |
| Email support | Not included | Not included | 1 business day | Priority | Priority + SLA |
| Named contact | Not included | Not included | Not included | Included | Included |
| Architecture review | Not included | Not included | Not included | Not included | Included |
Included on every plan
Path analysis is never the paid part.
Unlimited analyses
No metering on files, repositories or pipeline runs.
Full path traces
Every hop from input surface to action, with the model boundary marked.
Fix guidance
The smallest change that closes each open path, in the language of the file.
Control credit
Routes you have already closed report as closed instead of as noise.
Standards mapping
OWASP LLM Top 10 and CWE on every finding.
Local analysis
Source is read on your own device and never executed.
Deployment
Three ways to run the same analysis.
Web app
Point ExfilPath at a file or folder and read the report immediately. Included on the Free plan.
CLI, CI and MCP workflows
The same path engine in the terminal, the pipeline and MCP-connected tools, so path checks run where your team already works.
Self-hosted and air-gapped
Run the analysis entirely inside your own network for environments where source code cannot leave.
Enterprise
For regulated environments and code that cannot leave the network.
What an enterprise evaluation looks like
- 1
Scoping call
Which agents matter and what an unacceptable path looks like for you. - 2
Pilot analysis
One or two repositories, with the report reviewed together. - 3
Deployment decision
Managed, self-hosted or air-gapped. - 4
Rollout
Thresholds agreed per repository and evidence export configured.
Pricing FAQ
The commercial questions.
Is the Free plan really free?
Yes. The Free plan is free forever and includes the full browser analyzer, unlimited analyses, path traces, fixes and report export. No card is collected.
When do the paid plans launch?
Developer, Team and Business are coming soon. Choose Notify me on a plan and we will email you when it is available. Your Free plan stays free.
How is a seat counted?
A seat is a developer who runs analyses or reviews reports in your workspace. Pipeline runs are not billed separately, and there is no limit on how many analyses a seat can run.
Is annual billing cheaper?
Yes — annual billing is roughly 20% below monthly, charged once a year. Enterprise agreements are annual by default.
Can we self-host?
Yes, on Enterprise. The same analysis runs entirely inside your network, which is the usual answer for environments where source code cannot leave the perimeter.
Do you offer discounts?
Startups under ten people, academic research and open-source maintainers get substantial discounts, and open-source projects are free. Ask us and we will sort it out.
Do we need to talk to sales?
Only for Enterprise. Every other plan is self-serve, and you can evaluate the platform fully on the Free plan before speaking to anyone.
How do we pay?
Card for Developer, Team and Business. Enterprise supports invoicing, purchase orders and annual agreements.