Try the demo Check my app free

Pricing

Pay for the apps you watch. The proof is always included.

Every plan runs all four product lines (Lab, Code, Fix and Watch), shows every finding, writes every fix and proves it in the lab. Plans differ only in how many apps you monitor, how often we re-check them and how many people share the workspace.

Check my app freeAgency calculator
what one check includes
[REBUILD] migrations → lab Postgres   OK
[PROBE]   anon, signed-in stranger   LEAK
[FIX]     SQL migration written
[PROVE]   anon      → 0 rows        DENIED
          stranger  → 0 rows        DENIED
          owner     → own rows      OK
[CODE]    keys, deps, risky patterns
[RECEIPT] signed, Ed25519
──────────────────────────────────────
Included on every plan, Free too
no fix is ever countedLimits apply to apps and runs

Plans

Prices in pounds sterling. US dollars are approximate (£1 ≈ $1.30) and shown for guidance; invoices are in GBP.

Live now

Free

For one app you built yourself.

£0$0 · no card

The full product on one app. Not a trial.

  • Apps1
  • Re-checksmonthly
  • Manual runs4 / month
  • Seats1
  • Every finding, nothing hidden
  • Every fix proven as anon, stranger and owner
  • Key scan of code and full git history
  • Badge, API key, webhook, email alerts
Check my app free

Paste a public repo. No account needed for the first check.

Recommended

Request access

Maker

For founders with paying users.

£19/ month≈ $25 a month

or £190 a year: 2 months free

  • Apps3
  • Re-checksweekly or monthly
  • Manual runs30 / month
  • Seats2
  • Everything in Free
  • Weekly re-checks, with a diff of what changed
  • Email to every member when a new leak appears
  • Share the workspace with a co-founder or engineer
Request access

Card payments aren’t live yet. We set your plan and invoice you, usually within a day.

Request access

Agency

For studios shipping client apps.

£99/ month≈ $129 a month, 10 apps

or £990 a year. Extra apps £8 each a month

  • Apps10, then +£8
  • Re-checksweekly or monthly
  • Manual runs200 / month
  • Seats10
  • Everything in Maker
  • Client label on every app
  • Owner and member roles for your team
  • Webhook into your Slack, API for your CI
Request access

Card payments aren’t live yet. We set your plan and invoice you, usually within a day.

Talk to us

Enterprise

For companies whose teams build apps with AI.

Custompriced to your app count

Limits, invoicing and terms agreed with you.

  • Appsagreed
  • Re-checksagreed
  • Manual runsagreed
  • Seatsagreed
  • Everything in Agency
  • Limits set to fit your portfolio
  • Annual invoicing
  • You work directly with the founder
Talk to us

Email the founder. You’ll get a reply from the person who built it.

Every plan

We never put the proof, or your own findings, behind a paywall.

FindEvery findingEach leaking table, the columns exposed and who can read them. Nothing blurred or counted-only.
ProveThree-identity proofEach fix re-tested as an anonymous visitor, a signed-in stranger and the owner.
FixMigration you approveDownload the SQL, or commit it on GitHub in one click. Your engineer decides.
KeysFull git historyExposed AI, payment and database keys in your code and every past commit.
ReceiptSigned receiptsEach finished check is signed with Ed25519 so anyone can verify the result.
MonitorEmail alerts and diffsWhat’s new, what’s fixed and what’s still leaking since the last check.
ShareBadge and proof pageAn opt-in public badge with the date of your last check.
BuildAPI, webhooks, MCPAPI keys, a Slack-compatible webhook and a remote MCP server for your agents.

What counts

Three things are limited. Fixes aren’t one of them.

Limits reset on the first of each calendar month. Here is exactly what each one means.

Apps

A GitHub repo you monitor in your workspace. It stays verified once you’ve proved it’s yours, and keeps its full check history. The same repo can’t be added twice to one workspace.

Manual runs

Checks you start yourself, with “Run now” or through the API. Scheduled re-checks are never counted, and they keep running even if you use up your manual runs.

Seats

People in the workspace, including pending invites. Everyone gets the email alerts and can approve fixes or mark a table as meant to be public.

A fix that fails proof never counts against your limit.We don’t meter fixes at all. A fix that can’t pass all three checks is never called proven: it goes to a person, and the report says why.

Compare plans

Everything, side by side.

These limits are enforced by our API exactly as written here. Enterprise limits are set with you.

PatchLabs plans compared feature by feature
FeatureFreeMakerAgencyEnterprise
Limits
Apps monitored1310, +£8 each extraAgreed
Scheduled re-checksMonthlyWeekly or monthlyWeekly or monthlyAgreed
Manual runs a month (“Run now” and API)430200Agreed
Team seats1210Agreed
Product lines
PatchLabs Lab: 8 database checks, reproduced as three identities✓✓✓✓
PatchLabs Code: 13 repo checks: keys, dependencies, risky patterns✓✓✓✓
PatchLabs Fix: migrations proven in the lab✓✓✓✓
PatchLabs Watch: re-checks, alerts, badge, receipts✓✓✓✓
Every check
Every finding, nothing hidden✓✓✓✓
Database rebuilt from your migrations in a disposable lab✓✓✓✓
Fix proven as anon, stranger and owner✓✓✓✓
Migration download and one-click commit on GitHub✓✓✓✓
Key scan of code and full git history✓✓✓✓
Business questions in plain English, with a recommended answer✓✓✓✓
Approve a fix, or mark a table as meant to be public✓✓✓✓
Signed receipt (Ed25519) for every finished check✓✓✓✓
Monitoring and sharing
Diff since last check: new, fixed, still leaking✓✓✓✓
Email alerts to every member✓✓✓✓
Webhook (works as a Slack incoming webhook)✓✓✓✓
Public badge and proof page (opt-in)✓✓✓✓
Client labels✓✓✓✓
Developers and data
API keys and REST API for CI✓✓✓✓
Remote MCP server for Cursor, Claude Code and other agents✓✓✓✓
Export or delete everything we hold about you✓✓✓✓
Coming, not live yet
Private repos (needs our GitHub App)comingcomingcomingcoming
Automatic pull requests (needs our GitHub App)comingcomingcomingcoming
Card payments–comingcominginvoice

Agency calculator

How much for your whole portfolio?

Agency covers 10 client apps for £99 a month. Each app after that is £8 a month. Move the slider to the number of apps you ship and support.

20apps

Scheduled re-checks run on every app and never count towards the 200 manual runs a month.

Your price

Agency

£179/ month

≈ $233 a month

  • Base£99 for 10 apps
  • Extra apps10 × £8 = £80
  • Per app£8.95 a month
  • Seats10
Request access

Card payments aren’t live yet. We set your plan and invoice you, usually within a day.

Agency plan price by number of apps
AppsMonthlyAnnual (2 months free)Per app, monthly
10£99£990£9.90
15£139£1,390£9.27
20£179£1,790£8.95
30£259£2,590£8.63
50£419£4,190£8.38

Fewer than 4 apps? Free covers 1 app and Maker covers 3. More than 50? Talk to us.

Every plan

All four product lines, on every plan, Free too.

You never buy a product line separately. Every check runs Lab and Code together, every Lab finding goes through Fix, and Watch keeps re-checking on your plan’s schedule.

PatchLabs Lab

Rebuilds your database and reproduces each leak as anon, stranger and owner.

8 checks live · 5 coming

PatchLabs Code

Keys in code and history, vulnerable dependencies, risky AI-written patterns.

13 checks live

PatchLabs Fix

A migration for each Lab finding, proven in the lab, approved by your engineer.

pull requests coming

PatchLabs Watch

Scheduled re-checks, diffs, alerts, badge, proof page, signed receipts and Live posture.

live · 10 posture checks
18of 20fixes passed the strict lab proof with no human1
3.5minmedian time from repo to proven fix1
15of 20needed only the smallest model1
  1. PatchLabs autonomous pipeline on 20 new apps, 9 Nov 2026, n=20. 18 of 20 fixes passed the strict lab proof with no human; the other 2 went to a person. Small sample, published with the misses. Methodology.

Honest limits, on every plan. Private repos and automatic pull requests are coming with our GitHub App; today it’s public repos, with fixes as a downloadable migration or a one-click commit on GitHub. We don’t do pentests and we don’t certify compliance. Five announced Lab checks (PL-012 to PL-016) aren’t live yet and aren’t counted above.

How upgrading works today

Free is live now. Paid plans are set by a person, for now.

We haven’t connected card payments yet, so we’d rather tell you exactly what happens than show you a checkout that isn’t there.

  1. Start on Free

    Paste your public repo on the home page, or sign in with an email link (no password). Your first app is free.

    live now

  2. Request a plan

    In Settings → Plan, pick Maker or Agency and add a note if you like. The request comes straight to the founder.

    takes a minute

  3. We set your plan

    We switch your workspace to the new plan and email you an invoice. New limits apply as soon as the plan is set.

    usually within a day

  4. Card payments

    Self-serve checkout with cards is coming. Until then, nobody is charged automatically, and nothing renews without an invoice.

    coming

No guarantees. We don’t sell a promise that your app is secure. Every plan gets the same evidence: the lab proof for every fix, a signed receipt, and a report that says plainly what it couldn’t check.

Billing questions

Straight answers about money.

Something else? Email the founder. You’ll get a reply from the person who sets the prices.

How do I pay for a paid plan today?

Request the plan in Settings. We set it on your workspace and email you an invoice. Card payments aren’t live yet; when they are, you’ll be able to switch to them.

What happens when I reach a limit?

We never cut coverage mid-month. If you use all your manual runs, “Run now” and API runs are paused until the 1st, but scheduled re-checks keep running and alerts keep arriving. If you reach your app limit, the apps you already have stay monitored; you just can’t add another until you upgrade or remove one.

Do fixes that fail proof count against my plan?

No. We don’t count fixes at all, proven or not. A fix that fails any of the three checks is never called proven: it goes to a person and the report explains why. What counts is apps, manual runs and seats.

Is there a free trial?

Free is the trial, and it isn’t time-limited: one app, every finding, every fix proven, monthly re-checks. Upgrade when you want more apps or weekly re-checks.

How does annual billing work?

Pay for 10 months and get 12: Maker is £190 a year and Agency is £990 a year, with extra Agency apps at £80 a year each. Say “annual” in the note when you request access.

How do I cancel?

Email us. We move you back to Free at the end of the period you’ve paid for. Your reports and check history stay; there’s nothing to cancel on a card because nothing is charged automatically.

Which currency do you bill in? Is there tax?

We bill in pounds sterling. The dollar amounts on this page are approximate, at about $1.30 to the pound, and only for guidance. Prices are shown without tax; if tax applies, your invoice shows it before you pay.

Do you offer discounts for open source or non-profits?

We don’t publish one yet. If you maintain an open-source project or run a non-profit, email us and tell us about it.

Is there a guarantee or a refund promise?

No. We don’t claim any app is secure, and we don’t sell guarantees. What you get is evidence you can check yourself: the exact queries we ran as each identity, their results, and a signed receipt.

Free check

Start with one app. It’s free, and the proof is the same as on every plan.

Paste your public repo. You’ll get the leaks, the fix and the proof on one page.

Prefer a person first? Email the founderHow we compare