Corgea

Corgea is an AI native application security platform that finds, triages and fixes vulnerabilities across code, open source packages, infrastructure as code and containers. It reasons about a codebase's business logic and infrastructure to separate real risk from noise, then produces fixes ready for developers or coding agents to review and merge. It is built for CISOs, security engineers, developers and DevOps teams that want to replace a collection of separate scanners with one platform. Products include AI SAST with logic and authentication scanning, dependency scanning, IaC scanning, container scanning, secrets detection, code quality scanning, SBOMs with license enforcement, attack surface mapping, scanning and a registry for agent skills, AI penetration testing and security design review. Findings appear in the IDE, in pull requests and in tools such as Jira, and the Corgea Agent can work alongside coding agents. Pricing is published, with monthly and yearly billing. Free costs $0 for individual developers and includes AI SAST, logic and auth scanning, dependency scanning, secrets detection, container scanning and IaC scanning. Growth costs $39 per developer per month and adds PR scanning, code quality, the Corgea Agent, Jira integration and license enforcement. Scale costs $49 per developer per month and adds custom and blocking rules, reporting and analytics, team management, and APIs and webhooks. Enterprise is custom and adds SSO and SCIM, single tenant deployment, SLA management, audit logs and premium support. Corgea also publishes free open source tools and runs a security research program with public advisories.