Corgea
Application security platform that scans code, dependencies, IaC and containers and generates ready-to-merge fixes
Corgea is an AI-native application security platform. It scans a team's code, packages, infrastructure and containers, uses its understanding of code, business logic and infrastructure to separate real risk from noise, and generates fixes that developers or coding agents can review and apply.
Key features:
- AI SAST that catches risky code paths such as injection flaws.
- Logic and auth scanning for issues like trusting client-supplied prices.
- Dependency scanning that prioritizes exploitable packages and safe upgrades.
- Secrets, container and infrastructure-as-code scanning.
- PR scanning, code quality enforcement and license enforcement.
- The Corgea Agent and review-ready fixes.
Corgea integrates with IDEs, source control, CI/CD pipelines and Jira. The Free plan covers individual developers (up to 2 users, 10 repos and 10 PR scans a month) with no credit card. Growth is $39 and Scale $49 per developer per month, adding PR scanning, custom and blocking rules, and APIs; Enterprise adds SSO, SCIM, single-tenant deployment and audit logs.