Pricing
Pay for outcomes, not noise.
Konvu charges only for delivered work. No per-seat or per-scan fees.
Business
For teams getting started with Konvu.
$2,000/ month
Includes 400 confident verdicts per month.
- Agentic triage with the evidence behind every verdict
- Auto-fix PRs on what Konvu proves exploitable
- Plugs into Snyk, Wiz, Semgrep, and 20+ others you already run
- Konvu SCA, SAST, and Secrets scanning, if you would rather not run your own
- Slack and email notifications
- SOC 2 Type II
Free trial, then month-to-month. Cancel anytime.
Enterprise
For organizations with security, deployment, or scale requirements.
Custom
Sized to your scanner volume.
Everything in Business, plus:
- Push integrations and API/CLI access
- Self-hosted analysis option
- SSO, SCIM, audit logs
- Custom triage policies
- Dedicated SLA and named CSM
Annual contracts. Volume-based pricing.
What you pay for
Confident triage verdict
Konvu reaches a confident verdict on a finding, backed by evidence.
Successful fix PR
Konvu opens a pull request that successfully fixes the vulnerability.
You only pay for work delivered. Inconclusive runs and failed PRs are free.
Key features
A full breakdown of what is included in each plan.
Scroll the table sideways to see the Enterprise column.
| Feature | Business Start free trial → | Enterprise Book a demo → |
|---|---|---|
| Core platform | ||
| Agentic triage with evidence | Included | Included |
| Reachability analysis | Included | Included |
| Exploitability analysis | Included | Included |
| Container CVE triage | Included | Included |
| Auto-remediation (auto-fix PRs) | Included | Included |
| Bug bounty reproduction | Not included | Included |
| Integrations | ||
| SAST, SCA, and container scanners (Snyk, Wiz, Semgrep, Trivy, and 20+ more) | Included | Included |
| Konvu SCA, SAST, and Secrets scanning | Included | Included |
| Cloud SCMs (GitHub, GitLab) | Included | Included |
| Slack and email notifications | Included | Included |
| Push to ticketing (Jira, ServiceNow) | Not included | Included |
| Self-managed SCMs (GitHub Enterprise Server, GitLab self-managed, Bitbucket DC, Azure DevOps Server) | Not included | Included |
| API and CLI access | Not included | Included |
| Deployment | ||
| Cloud analysis | Included | Included |
| Self-hosted analysis (details) | Not included | Included |
| BYO LLM keys (optional) | Not included | Included |
| Governance and access | ||
| SSO | Not included | Included |
| SCIM provisioning | Not included | Included |
| Custom roles and granular permissions | Not included | Included |
| Custom triage policies | Not included | Included |
| Audit logs | Not included | Included |
| Security and compliance | ||
| SOC 2 Type II | Included | Included |
| Zero LLM data retention | Included | Included |
| Support and commercial | ||
| Business-hours support | Included | Included |
| Priority support | Not included | Included |
| Dedicated SLA | Not included | Included |
| Named CSM | Not included | Included |
| Volume-based pricing | Not included | Included |
| Invoice billing and MSA | Not included | Included |
Frequently asked questions
Konvu returns one of three outcomes on every finding: exploitable, false positive, or inconclusive. You are billed for the first two, where Konvu reached a confident verdict and can show the evidence behind it. Inconclusive findings cost nothing.
A successful remediation is when Konvu opens a pull request that fixes the vulnerability. If no PR is opened, or the fix attempt fails, that attempt is free.
No. You pay for delivered work: confident verdicts and fix PRs that land. Failed and inconclusive runs are free.
Your call. We can cap the plan at 400 so nothing runs past your budget, or bill the overage so the work keeps moving. If your volume is consistently higher, we will size a plan around it rather than leave you on overages.
Business is monthly: unused triages do not roll over to the next month. Enterprise contracts are annual, and unused capacity within the contract year remains available.
Business is month-to-month. Enterprise contracts are annual, with multi-year agreements available at additional discounts.
Yes. Start a free trial at app.konvu.com and run Konvu against your own findings before you pay anything. For Enterprise, we run guided pilots before contracting. Get in touch to set one up.
Yes. You can upgrade from Business to Enterprise at any time. Contact us when you need SSO, self-hosted analysis, push integrations to your ticketing system, or other Enterprise capabilities.