Compare the coverage you or your team needs.

No. You may assess only a web application your team controls and for which you verify the exact origin. Assessments remain within that authorized scope and use bounded methods that do not modify the application, subject to the published service limits.

Official package distribution is not available yet. When access opens, install the Edgelace CLI on your computer, sign in, then connect the local Edgelace MCP server to a supported coding client such as Codex, Cursor, or Claude Code. The planned MCP connection will let your coding agent start authorized reviews and receive report handoffs. The quickstart will provide the supported commands when access opens.

A coding agent can help write code and fix findings, but it is not a substitute for an independent security assessment. Without a security background, it is difficult to know which attack paths, authorization boundaries, and failure modes to ask a general agent to examine or how to validate its answers. No prompt can guarantee complete coverage. Paid AI assessments are not available yet. The planned workflow combines verified scope, deterministic checks, bounded AI-assisted discovery, and a separate automated review. Items that lack sufficient support stay marked Verification Required. Reports return evidence, limits, and reproduction guidance to the coding workflow.

Each subscription includes its deterministic review entitlement, bounded by published rate, concurrency, capacity, and reasonable use limits. Personal Developer includes 1 Lite AI report per paid service month and may buy another Lite report when available. Personal Pro includes 3 Lite AI reports and 1 Authenticated report per paid service month and may buy either report kind when available. Starter cannot buy AI report add-ons. Business includes deterministic reviews for its active team seats, but no AI reports are included; additional Business reports are separate purchases for authorized scopes when available. Snapshot reports remain available for 24 hours, Developer reports for 30 days, and Pro reports for up to 90 days.

Starter includes no AI reports or AI report add-ons. It uses deterministic reviews during its trial and after it becomes a paid subscription. Personal Developer and Pro AI allowances begin only after confirmed payment.

Subscriptions provide deterministic automated security reviews. Personal Developer includes 1 Lite AI report and Personal Pro includes 3 Lite AI reports plus 1 Authenticated report per paid service month. Developer may purchase an additional Lite report; Pro may purchase either report kind when available. Business AI reports are purchased separately for an authorized scope when available. Edgelace provides a security report and does not modify your application. From the dashboard, you can copy a ready to use prompt and paste it into your coding agent so it can help you investigate and fix the findings. These automated reviews are not a human penetration test.

It means an item remains unconfirmed and needs review by your team before you treat it as a finding or act on it. These items stay separate from confirmed findings and are excluded from confirmed totals. The label does not mean Edgelace reviewed the item or will review it. Read the AI Disclaimer.

Each additional eligible Personal or Business AI report is a separate purchase for an authorized report scope when available. Included Personal plan allowances are limited to their paid service month. Personal has no credit packs, top ups, or rollover balances. New Business reports are not sold as units for unspecified future targets. Any previously purchased Business prepaid units retain their original purchase terms, including eligible unused-unit remedies. Contact Edgelace support if a purchased report cannot safely start or a run fails; a replacement run may be available at no additional charge, and you may request an eligible refund without first accepting a replacement.

Starter monthly and annual are the only Personal prices with a planned seven-day trial. A payment method is required, the trial may be used once per Edgelace billing account, and it includes deterministic reviews only. Unless canceled before the trial ends, the seller identified at checkout charges the selected Starter price under the trial terms shown there. Developer and Pro do not include a trial.

The seller identified at checkout bills the displayed annual total in advance. Annual prices cost less than twelve monthly payments. Personal included AI allowances reset in paid service month windows, not as one annual lump. Additional eligible AI reports are individual purchases when available. The currency, taxes, and total shown before purchase are authoritative.

Subscriptions renew on the selected monthly or annual cadence until canceled. You may cancel through the available account billing page or the seller's management link in your receipt. Cancellation normally takes effect at the end of the current billing period, prevents future renewal charges, and does not automatically refund unused time.

Contact Edgelace support to request a refund or help reaching the seller responsible for your transaction. Eligibility depends on the seller's buyer terms disclosed before purchase, any express Edgelace promise, and applicable law. Mandatory rights vary by location and prevail. See the Refund Policy for details.

Before payment, checkout identifies the seller and Merchant of Record and shows the applicable buyer terms, taxes, and total. That seller handles payment collection, receipts, transaction refunds, and payment disputes. Edgelace remains responsible for product and technical support.

A SIEM continuously collects and correlates operational security telemetry for threat detection, investigation, and response. Edgelace instead performs a bounded review when requested for a web application the customer controls. It returns application security findings with supporting evidence. It does not replace production monitoring, incident detection, or response.

Dependabot identifies known vulnerable dependencies and helps keep packages updated. Edgelace reviews the behavior and exposed surface of an authorized web application, including security risks that are not reducible to a dependency alert. Using both can provide complementary coverage.

These tools serve different roles. Dependency scanners identify known package security risks. SAST tools analyze source code patterns. DAST tools probe running applications. SIEMs monitor operational telemetry. Manual penetration tests are professionally scoped human engagements. Edgelace complements them with a bounded assessment your team can run on the exact web application it controls, with security findings supported by evidence in the coding workflow.

No. Edgelace is standardized security assurance software that teams use directly. It is not a custom penetration test, managed security engagement, compliance audit, or certification. Its reports are advisory and bounded to the authorized scope. They do not guarantee that an application is secure or free of vulnerabilities.