pricing

Pay per audit. Nothing else.

Scanning is free forever. AI audits use prepaid credits, your own Anthropic key, or your own cloud — you choose, no surprises.

Read it:

Free — scan forever, audit once

$0 · Real findings, no card, no sign-in. A GitHub or Google account adds one covered Audit.

Free deterministic scan first — secrets, known CVEs, real code findings, no card required. Audit — your first Audit is free. After that, about $5. Once per account. Covered Audit: the files that matter most, one pass. Paid: more of your code, two passes.

Deterministic secret + CVE scan, any repo, forever, no card, no sign-in, no cap. Audit covered per account via GitHub or Google. Works on web, API, MCP, GitHub Action.

Credits — prepaid, per audit

from $29 · Bigger packs cost less per audit. Credits never expire.

Priced per Audit, at 5.14 credits each.

Starter
$29 · 5 Audits · 30 credits
Standard
$74 · 17 Audits · 90 credits
Volume
$189 · 52 Audits · 270 credits
Bulk
$479 · 157 Audits · 810 credits

$29 buys 5 Starter audits, plus 4.3 credits spendable on judge/module calls. Costs drop 16–25% per bigger pack, down to $479 Bulk. Bigger repos may need extra passes and credits — checkout quotes the total first.

credits from $0.59 each · Audit = 5.14 credits · run_module = 5.03 credits · judge_output = 0.39 credits · never expires · refundable within 30 days

Your own key — flat monthly

$49/mo · Your Anthropic bill, our pipeline. We never see your code. (BYOK Pro)

$49/mo pays for the pipeline, not tokens. Bring your Anthropic key — cost and reasoning stay on your account, under your vendor terms.

covers API, MCP, GitHub Action · funded by a 100-credit monthly allowance — a run draws 2 credits instead of 5.14 credits, about 50 runs a month · key sent as x-nittim-anthropic-key, forwarded per request, never stored · a pack tops it up · web always uses credits

Enterprise — your cloud, your bill

from $18k/yr · Whole company, single sign-on, audit trail — engine runs in your own cloud.

Seat bands, unlimited repos, SSO, SARIF, policy-as-code, append-only audit log.

The kit includes the component's full source, the boundary contract, deployment topology, and architecture brief — everything your platform and security teams need to judge the design.

runs on Claude via Bedrock in your AWS, or Anthropic org · contact us — no self-serve checkout

Credit packs

Priced per Audit, at 5.14 credits each.

$29 buys 5 Starter audits, plus 4.3 credits spendable on judge/module calls. Costs drop 16–25% per bigger pack, down to $479 Bulk. Bigger repos may need extra passes and credits — checkout quotes the total first.

Starter
$29
5 audits · 30 credits · $0.97/credit
Standard
$74
17 audits · 90 credits · $0.82/credit
Volume
$189
52 audits · 270 credits · $0.70/credit
Bulk
$479
157 audits · 810 credits · $0.59/credit

Ready to buy?

Sign in to see the packs. Audit — your first Audit is free. After that, about $5. Run it before you spend anything.

Credits never expire.

Unused credits refundable within 30 days of purchase.

What it costs, by repository size

Find your repo size below. Audit is 5.14 credits flat. Full Audit scales with size — quoted before it runs.

up to ~194 filesup to ~64,600 lines
3.48 CR
Full Audit · 1 pass · ≈$2–$3
~195–582 files~64,900–193,800 lines
6.96–10.44 CR
Full Audit · 2–3 passes · ≈$4–$10
~583–1,358 files~194,100–452,200 lines
13.92–24.36 CR
Full Audit · 4–7 passes · ≈$8–$24
~1,359–3,880 files~452,500–1,292,000 lines
27.84–69.6 CR
Full Audit · 8–20 passes · ≈$16–$67
more than 3,880 files
quoted first
Past the flat bands — quoted individually before charging.

What each audit costs

Free scan
0 CR
No AI, no account, free forever.
Audit
5.14 CR
Prioritized files. Free once per account.
Full Audit
quoted first
Every eligible file, priced before you run it.
One module over the API or MCP
5.03 CR
A single check, run on its own
An AI audit on your own Anthropic key
200 CR
BYOK Pro — tokens bill to you, not to nittim.

What an AI audit gives you

Six scores plus one verdict — Executive, Production Readiness, Security, Privacy, Architecture, IP Protection — backed by evidence: ship it, minor fixes, real work needed, or don't ship. Evidence decides the verdict, not confident writing.

See what we check →

Questions people ask before paying

What’s a credit?

Prepaid value, spent only when an audit runs — cheaper by the pack.

Credits run $0.59–$0.97 each by pack size, never a flat $1. An Audit costs 5.14 credits; a module run over API or MCP costs 5.03 credits. The free scan costs nothing.

Do credits expire?

No — buy once, use whenever. Refundable for 30 days if you change your mind.

Credits never expire. Refundable within 30 days of purchase.

What if I want my money back?

Unused credits are refundable within 30 days.

Unused credits refundable within 30 days of purchase. Failed audits auto-refund, capped at 3 a day per account before manual review.

A confirmed false positive earns 1 credit back, up to the report's cost.

Tell us and we'll sort it out.

Can I use nittim without sending you my code?

Yes — three of the five rungs never put your code on our model account.

Start with a library report. Then your repo on the free scan — no AI there. Then an AI audit on your own key. Only the fourth rung asks you to trust us. See the full ladder →

What happens when I run out of credits?

We stop before charging, and bring you straight back.

Out of credits? Top up — you'll return here with this repo loaded, nothing to redo. Over the API, a 402 carries checkoutPath.

Does everyone get their Audit covered?

Everyone who signs in with GitHub or Google.

Audit — your first Audit is free. After that, about $5. One per account, GitHub or Google only — not email. Spent before purchased credits.

Where does the audit run, and when?

Wherever your own gate already lives — never behind a cloud runner.

Runs wherever your gate lives — secret scan before push, Audit at merge, or on demand. No cloud runner to wait on.

Do I know the price before anything runs?

Yes — every paid Audit quotes first. Only your own click spends money.

Price quoted first. Nothing runs until you confirm — only your own click spends money.

Does an audit slow the agent down?

No — your assistant keeps moving at model speed; the audit catches what that speed costs.

No. Your assistant moves at model speed; the audit catches what that costs. Keep the velocity, lose the regret.

Does it work on old or messy repos?

Yes — a URL is enough. Legacy, vibe-coded, inherited, or last week’s rush job.

Works on any repo — legacy, vibe-coded, inherited, last week's rush job. A URL is enough.

What happens to a report after it’s used once?

It’s kept. Audits, disputes and re-runs stay on record for next time.

The record outlives the session. Audits, disputes and reruns are kept — the next developer or assistant starts from what's already proven.

Start with the free scan.

Paste a public GitHub repo. See real findings in minutes — no signup, no card, no setup.