Endor Labs
Endor Labs analyses application code and dependencies to identify exploitable security issues. Its AI-assisted analysis and AURI agent-governance features help teams assess code risks and control AI-assisted development workflows.
The vendor lists a Developer free tier and paid Core and Pro tiers but does not publish numeric plan prices on the linked pages.Is Endor Labs right for you?
Good for
- Engineering and security teams that need to scan code and enforce governance for AI-driven coding agents and CI/CD pipelines.
- Documents AI-powered static analysis (AI SAST) for scanning code and pull requests.
- Provides agent governance that inventories coding agents, models, MCP servers and skills for policy enforcement.
Keep in mind
- The Developer free tier lacks a user interface, policy controls, and scan history.
- Public pages do not provide numeric prices for paid Core and Pro tiers; you must contact sales for costs.
- Confirm if you require a free-tier user interface, policy controls, or scan history—these are not available on the Developer free tier and may require a paid team tier.
Pricing and plan limits
The linked official pages do not list plan prices. The Pricing page shows a Developer FREE tier and 'Get pricing' for paid tiers, and explains seat-based billing without numeric amounts.
More about capabilities and limits
Documented strengths
Documents AI-powered static analysis (AI SAST) for scanning code and pull requests.
Provides agent governance that inventories coding agents, models, MCP servers and skills for policy enforcement.
Uses reachability-based analysis to surface only exploitable vulnerabilities, reducing noise in vulnerability queues.
Limitations to consider
The Developer free tier lacks a user interface, policy controls, and scan history.
Public pages do not provide numeric prices for paid Core and Pro tiers; you must contact sales for costs.
Choosing a plan
Start with the Developer free tier to validate local AI SAST scans in your editors, then run a short proof-of-concept with Core/Pro to confirm AURI’s agent inventory, policy enforcement, and reachability-based findings work across your CI/CD workflows.
Based on the linked product documentation.
Official sources
Alternatives to Endor Labs
Choose around the work you need to do.