Corgea
AI-native application security platform that scans code, dependencies, secrets, containers and IaC, filters false positives and generates fixes for developers and coding agents.
About Corgea
Traditional SAST tools miss business-logic and auth flaws, flood teams with false positives and leave developers to write every fix by hand.
Who it’s for
- Developers and small teams who want AI SAST with automatic fixes in their pull requests and IDE
- Security engineers who need policy, blocking rules and SLA tracking across many repositories
When to consider it
Consider Corgea when you want one tool for AI SAST, logic and auth flaw detection, dependency, secrets, container and IaC scanning, with AI fixes delivered through pull requests, IDE extensions (VS Code, Cursor, Visual Studio, JetBrains) or an MCP server for coding agents.
Tradeoffs & limitations
- The Free plan covers 2 team members, 10 repositories, 10 PR scans a month and 10 SAST auto-fixes; unlimited PR scanning, code quality checks and the Corgea Agent need Growth or above.
- Growth is $39 per developer per month ($31 billed yearly) with a minimum of 5 seats and 50 auto-fixes; Scale is $49 ($39 yearly) with a minimum of 20 seats and 200 auto-fixes. SSO, SCIM, single-tenant and audit logs are Enterprise-only at custom pricing.
- Seats are counted as contributing developers in the last 90 days.
SOTA overview · Documentation-based assessment · Sources & review method
Updates
No updates shared yet.
Discussion
Newest firstAsk a question or share how you use Corgea.
Keep it helpful. Community rules
Loading discussion…
Sources & review method
Documentation-based assessment · Nov 1, 2026 · Prepared with AI assistance; not a hands-on benchmark.
Checked by SOTA · AI-assisted documentation review. Selection advice is our assessment; verify current requirements for your deployment.
Import history & original evidence
Corgea official website
AI-native application security platform that scans code, dependencies, secrets, containers and IaC, filters false positives and generates fixes for developers and coding agents.
Based on official pages and announcements checked on 2026-11-01. No hands-on test, performance benchmark or popularity ranking is claimed.