CheckOps home

Tools directory

C

CheckOps

Corgea

Corgea is an AI application security platform that finds, triages and fixes vulnerabilities across code, packages, IaC, containers and secrets, with AI SAST, AI pentesting and a free plan.

Visit website

Latest public signals

Not refreshed yet. Refresh reads the public site and, when the entry has a GitHub repository, the latest release.

Visit Website

Introduction

Corgea finds, triages and fixes vulnerabilities across code, packages, infrastructure and containers. Its AI SAST aims for higher-signal static analysis with accurate fixes, and the platform adds IaC, container, secrets, dependency (reachability-aware) and code quality scanning plus attack surface mapping.

Newer modules include AI pentesting with auditor-ready reports and design-stage security reviews grounded in your repository. Developer experience covers IDEs, source control and MCP-powered workflows; its Q3 2026 update mentions 52 releases.

Launch and background: Y Combinator’s company directory lists Corgea in its Summer 2023 batch, with the one-liner “Corgea finds, and fixes insecure code and packages autonomously.”.

Features

  1. AI SAST: Static analysis with fixes.
  2. Dependency scanning: Reachability-aware.
  3. IaC, container and secrets: Broad coverage.
  4. AI pentest: Auditor-ready reports.
  5. Security design review: Design-stage risks.
  6. MCP workflows: Use in AI coding tools.

Pros

  1. Free plan: AI SAST and more for 2 members and 10 repos.
  2. 14-day Growth trial: No card.

Cons

  1. Broad platform: Overlaps with existing scanners.
  2. Per-seat costs: Paid plans priced per developer.
  1. Sign up for free and connect up to 10 repositories.
  2. Review triaged findings and suggested fixes.
  3. Turn on PR scans.

Resources:

Pricing

Corgea’s Free plan covers AI SAST, logic and auth scanning, dependency, secrets, container and IaC scanning for up to 2 members and 10 repositories (10 PR scans a month). Paid plans are listed at $39 and $49, with a 14-day Growth trial.

  1. Startups wanting one AppSec platform with AI fixes.

Conclusion

Corgea is a broad, AI-first AppSec platform with a usable free tier.

Compare its false-positive rate with your current SAST.

On CheckOps, Corgea is filed under the Security testing and Release & CI gates stages. Related tools listed here include Snyk, Semgrep, Aikido Security, Checkmarx, SonarQube and GitHub Advanced Security. A short trial on a real project, with your own code, data and pipeline, is usually the fastest way to choose between them, because fit matters more than feature lists. Facts here come from the official site, documentation and repository, checked on 11 November 2026.

Alternatives

Other tools on CheckOps that cover similar ground. Open a page, or compare one with Corgea side by side.