winfunc

winfunc is an AI security platform that uses autonomous agents to audit a codebase, prove which findings are actually exploitable, and hand engineers the fix as a pull request. It is aimed at engineering and security teams that want security review to keep pace with how often they ship code, and the company states it is backed by Y Combinator and SOC 2 Type II audited. Each finding is delivered with reproduction evidence where feasible, so teams can see why an issue matters rather than triaging a raw scanner list. The workflow covers one time surface and deep scans, incremental and scheduled scans, and review of individual pull requests, with suggested patch pull requests opened for the fixes. Other features listed include an AI triage assistant, an MCP server, Slack alerts, team access, and reports and analytics. The site also publishes a disclosure log of vulnerabilities its agents found in open source projects, including NGINX, Chromium, Node.js and Mattermost. Pricing is offered in four forms. A one time scan starts from $500 for a surface scan, with deep scans priced by scope and no subscription required. Pay as you go lets teams buy credits as needed, with the credit cost estimated before every scan and settled to actual usage afterward. A recurring plan provides a monthly credit allowance with discounted annual billing. Enterprise pricing is custom, based on committed usage, and adds customer controlled hosting, isolated tenants, bring your own model keys, organization wide policies and named support terms. Prices for the credit and recurring plans are not listed publicly and are scoped with the vendor.