what it costs
What does a code audit cost, and where can I start for free?
nittim charges nothing for the Scan or the Loop, though your assistant's own usage still applies to the Loop. A GitHub or Google account gets its first Audit free. After that, $29 buys 5 Audits. A Full Audit is priced by the size of your repo, and you see the price first. A human-led review is a different service.
Three steps, in order
- Scan
- Free, with no card and no sign-in. Checks a public or connected repo for committed secrets and dependencies with known vulnerabilities.
- Loop
- A checklist your own assistant runs, where your code already is. Free to run: nittim charges nothing and receives nothing of your code. Your assistant's own usage still applies.
- Audit
- A review of the code that matters most, ending in a verdict. A GitHub or Google account gets its first Audit free. After that, $29 buys 5 Audits.
Want every eligible source file read? That's a Full Audit. It is priced by the size of your repo, and you see the price first.
Start with the Scan, then run the Loop or see every price. Not sure the app is ready to launch? Read how to check an AI-built app.
What it can't tell you
nittim reads your code. A human-led review is a different service. Here is what nittim does not give you:
- The Scan reads your code as it stands now, not its git history. A key committed and later deleted isn't found.
- The Scan doesn't read a built bundle or your provider usage.
- nittim isn't a penetration test, and it isn't a qualified professional's advice.
- nittim doesn't give a human's judgment or sign-off.
You still want a person when:
- A client asks for a named reviewer's sign-off.
- A regulator or insurer asks for a human-led review.
- You want a person to weigh a trade-off with you.
Accuracy figures live on the benchmark page.
Common questions
How much does a code audit cost for a small startup, and where can I start for free?
nittim charges nothing for the Scan or the Loop, though your assistant's own usage still applies to the Loop. A GitHub or Google account gets its first Audit free. After that, $29 buys 5 Audits. A Full Audit is priced by the size of your repo, and you see the price first. A human-led review is a different service.
What are the alternatives to hiring a consultant to review an AI-built app?
Start free. Scan your repo, then run the Loop in your own coding assistant. When you want a written review, order an Audit. A consultant is a different service, with a person's judgment and sign-off.
Is the free option really free?
nittim charges nothing for the Scan, which needs no card and no sign-in. The Loop is free to run: nittim charges nothing and receives nothing of your code. Your assistant's own usage still applies.
When should I still hire a person?
nittim is advisory. It isn't a replacement for a penetration test or a qualified professional. Hire a qualified professional when a client, regulator or insurer asks for one, or when you want a person's judgment and sign-off.
How long does an Audit take?
Usually within 15 minutes. Worst case, 24 hours.
What happens to my code?
The Scan: Files leave your machine and are read in nittim's server memory. No model, no verdict. Kept: your report, with the line each finding points at — off by setting. The Loop: Nothing of your code is sent to nittim. Your assistant runs it where it already works. Anonymised counts only, and only if you choose. An Audit reads a digest of your source. The digest goes to Anthropic on nittim's key, kept up to 30 days. Bring your own key and it goes to your account.