Corgea

Corgea, a Y Combinator-backed company, is an AI-native application security platform that detects vulnerabilities in code, dependencies, infrastructure, and containers, then delivers developer-ready fixes, identifying business logic flaws and authorization gaps that traditional scanners miss. It offers AI SAST that catches risky code paths with precise, review-ready fixes, dependency scanning that prioritizes exploitable packages with upgrade guidance, and IaC and container scanning that prevents cloud misconfigurations. Corgea includes secrets scanning to stop exposed credentials before deployment, code quality scanning enforcing maintainable patterns, attack surface mapping connecting reachable endpoints to real vulnerabilities, and AI Pentest and Security Design Review offering autonomous penetration testing and design-stage risk assessment. It integrates with VS Code, GitHub, GitLab, and Azure DevOps. Pricing is freemium with a 14-day free trial of the Growth plan requiring no credit card, plus additional paid tiers detailed on its pricing page.