# Corgea

> Application security platform that scans code, dependencies, IaC and containers and generates ready-to-merge fixes

Source: https://dontaskagain.com/corgea
Website: https://corgea.com/?utm_source=dontaskagain
Pricing: Freemium
Categories: [Security](https://dontaskagain.com/categories/security.md), [Code review](https://dontaskagain.com/categories/code-review.md)
Listed: 2026-10-25
Updated: 2026-10-25

Corgea is an AI-native application security platform. It scans a team's code, packages, infrastructure and containers, uses its understanding of code, business logic and infrastructure to separate real risk from noise, and generates fixes that developers or coding agents can review and apply.

**Key features:**

- AI SAST that catches risky code paths such as injection flaws.
- Logic and auth scanning for issues like trusting client-supplied prices.
- Dependency scanning that prioritizes exploitable packages and safe upgrades.
- Secrets, container and infrastructure-as-code scanning.
- PR scanning, code quality enforcement and license enforcement.
- The Corgea Agent and review-ready fixes.

Corgea integrates with IDEs, source control, CI/CD pipelines and Jira. The Free plan covers individual developers (up to 2 users, 10 repos and 10 PR scans a month) with no credit card. Growth is $39 and Scale $49 per developer per month, adding PR scanning, custom and blocking rules, and APIs; Enterprise adds SSO, SCIM, single-tenant deployment and audit logs.

## More security agents

- [XBOW](https://dontaskagain.com/xbow.md): Autonomous penetration testing platform that attacks your web apps and APIs and reports only validated, working exploits
- [Dropzone AI](https://dontaskagain.com/dropzone-ai.md): AI SOC analyst agents that investigate security alerts end to end and run threat hunts across SIEM, EDR and cloud
- [Prophet Security](https://dontaskagain.com/prophet-security.md): AI SOC agents that investigate every security alert, respond via scoped actions, hunt threats and tune detections
- [Aikido Security](https://dontaskagain.com/aikido.md): Security platform whose agents find, fix, deploy and verify fixes for vulnerabilities across code, cloud and runtime
- [Torq](https://dontaskagain.com/torq.md): AI SOC platform whose agents triage, investigate and remediate security alerts and run agentic threat-hunting runbooks
- [Lakera](https://dontaskagain.com/lakera.md): AI security platform that detects prompt injection, data leakage and jailbreaks in apps and agents at runtime