Aletheore Community is the deterministic scanner, free forever. Aletheore Flash adds automatic PR reviews. Aletheore AIR adds a second-model verification pass on those reviews, managed AI audits, AIRview, AI-generated Docs, endpoint monitoring, and team seats.
Local-first
Aletheore Community
$0
forever
Deterministic scan from the CLI.
Targeted query and diff commands from existing evidence.
Local dashboard, history, and MCP tools.
GitHub Action PR comments for new secrets, vulnerabilities, and layer violations.
Free AI-powered PR reviews, no expiration planned.*
Hosted GitHub App
Aletheore Flash
$8
/month, monthly billing only
Everything in Community.
Automatic Flash reviews on every push to an open pull request, up to 800/month - one model, evidence-grounded, source-of-record for what changed in the diff. Real head-to-head numbers (0 false positives, real recall) on the Benchmarks page.
No independent second-model verification pass - that's AIR's addition, see below.
Hosted GitHub App
Aletheore AIR
$29.99
/month, up to 3 team members
Everything in Flash.
Managed audits and AIRview, written by DeepSeek.
AI-generated Docs for every public symbol - grounded in source, kept current automatically, nobody has to write one. Exportable as a single Markdown file.
Flash reviews get a second, independent model that re-checks every individual finding against the diff before it's ever shown to you, dropping anything that doesn't hold up. Methodology and real per-review cost on the Benchmarks page.
Slack / Teams alerts on new findings.
Branch-protection Check Runs for new secrets.
Endpoint health monitoring across multiple targets, with a public status API.
Install it on your GitHub account or organization, then hit Subscribe above to activate Flash or AIR on that installation. The public Marketplace listing is still under GitHub's review, so this direct link is the way to find and install it today.
*Free AI Reviews: AI-powered PR reviews are free, built on the same evidence-only (compact) prompt as AIR - see the Benchmarks page for the methodology. They don't include AIR's independent second-model verification pass. Routed across multiple providers' free tiers so it isn't tied to any single company's quota - usage is globally rate-limited and subject to availability, and access may be adjusted if that changes.
Source-grounded PR reviewsEndpoint monitoring with file and lineMCP tools for coding agents
Enterprise
Need something custom?
A larger team, a custom seat or repo allotment, a procurement or security questionnaire, or billing terms the self-serve plans don't cover - talk to us directly and we'll work out something that fits.