Scan agents for free. Pro adds unlimited history, AI remediation, CI and Gateway connections with enforcement. Team adds a shared workspace with Gateway for shared servers, GitHub checks and audit streaming.
Scan agents for free. Pro adds unlimited history, AI remediation, CI and Gateway connections with enforcement. Team adds a shared workspace with Gateway for shared servers, GitHub checks and audit streaming.
Scan agents and keep a small history.
$0
No account needed to scan
For developers and security engineers shipping agents to production.
$19/mo
per month
Everything in Free, plus:
For engineering and security teams securing how their organization builds agents.
$57
per month · includes 3 seats
$19 per additional seat / month. 3-seat minimum.
A shared workspace with:
Pro is a personal plan. Team is billed per workspace; members don't need Pro.
| Feature | Free ($0) | Pro ($19/mo) | Team ($19/mo/seat)3-seat minimum |
|---|---|---|---|
| Scanning | |||
| Security checks | 31 checks + secret detection | Same | Same |
| Rule packs (OWASP LLM, OWASP Agentic, SOC 2, custom) | Included | Included | Included |
| Saved scans | 5 a month | Unlimited | Unlimited, shared |
| History and scan comparison | Your saved scans | Included | Shared workspace history |
| Reports | HTML reports | HTML reports and SARIF via CLI | HTML and SARIF for repository scans |
| Shareable assessments | — | Included | Included |
| AI remediation | — | 50 a month | 50 per seat a month, pooled |
| Developer workflows | |||
| API, CLI and GitHub Action | — | Personal API keys | Workspace service keys |
| Baseline regression checks | — | Included | Included |
| GitHub App and repository scans | — | — | PR checks and default-branch scans |
| Runtime exposure in repository scans | — | — | Included |
| Foo Guard MCP connector | Personal Library and inventory | Adds Gateway tools | Workspace Library, inventory and Gateway |
| Gateway | |||
| MCP connections | — | Up to 5 personal | Up to 8 shared servers |
| Enforcement (blocking by policy) | — | Monitor or enforce, per connection | Included |
| Request limits | — | 120 a minute; 7 days or 5,000 requests of history | 120 a minute; 10,000 tool calls a day |
| Agent credentials | — | 1 rotatable credential | Short-lived (1, 8 or 24 h), rotate and revoke |
| Model routing with budgets | — | — | OpenAI and Anthropic, workspace and per-agent budgets |
| Signed webhook alerts | — | — | Included |
| Workspace and governance | |||
| Personal Library, agents and Inbox | Included | Included | Plus a shared, versioned Library |
| Members, roles and invitations | — | — | Included |
| SAML company sign-in | — | — | Included |
| Scan policy and policy-as-code | — | — | Included |
| Library reviews, exceptions and dependencies | — | — | Included |
| Audit and evidence | |||
| Tamper-evident Gateway evidence | — | Personal log, verifiable download | Workspace log |
| Audit log and CSV export | — | — | Included |
| SIEM streaming (HTTPS, Splunk) with signed checkpoints | — | — | Included |
Pro is a personal plan; Team is billed per workspace and members don't need Pro. CLI and GitHub Action use Pro API keys or Team workspace service keys — see CI/CD enforcement.
Gateway only controls traffic routed through it. Bring your own model provider keys; provider charges are separate. Signed alerts need a receiver you configure and are best effort. Control mappings support security reviews; they are not a compliance certification.
New here? Create an account to save up to 5 scans a month. Upgrade to Pro for unlimited history, AI remediation and CI.
Yes. Paste or upload a JSON or YAML agent configuration; no account needed. Create a free account to save up to 5 scans a month and use the personal Library. Pro removes the limit and adds AI remediation, CI and Gateway.
Foo Guard checks declared agent identity, permissions, tools, credentials, autonomy, and auditability. It is a pre-deployment configuration assessment; it does not execute your agent.
No. Deterministic rules decide findings, severity, and scores. Optional AI remediation helps explain findings and suggest improvements.
Team is priced per user with a minimum seat count. The card shows the per-user price and minimum total for the selected billing interval. Review workspace checkout for the final seat count and total.
Pro supports personal API keys, the CLI, and GitHub Action workflows. Team adds organization service keys, native GitHub App checks, organization policy, and repository scanning.
Pro covers up to 5 of your own MCP connections. Each can monitor (flag risky tool calls) or enforce (block them), and you keep tamper-evident evidence you can download. Team Gateway is shared by a workspace: up to 8 servers, workspace policies with exceptions, model routing with budgets, signed webhook alerts and SIEM streaming.
Workspace features lock, and nothing is deleted. Company sign-in keeps working, and owners can still remove members, revoke credentials and turn things off. Subscribing again restores everything, and paused SIEM streams send what they missed.
Your first security improvement starts with a scan.
Analyze an agent ↗Need help choosing? Talk to us
