Perfai Security
Find and fix live vulnerabilities in vibe-coded apps with one prompt
Overview
Perfai Security is aimed squarely at the wave of apps built quickly with AI coding tools, where speed often comes at the cost of basic access-control hygiene. Instead of a traditional scan-and-report model, its agents try to actually exploit business-logic and permission flaws in your live app, then generate a pull request with the fix already written. That auto-fix step is the part worth paying attention to, since most AppSec tools stop at the report and leave the fixing to you.
It launched on Product Hunt on July 9, 2026 and placed third for the day with over 200 upvotes, and it already has a public pricing page, a Microsoft Marketplace listing, and a Crunchbase profile, which puts it a step ahead of most brand-new launches in terms of real infrastructure. Even so, it's a young company with an unproven track record on how well its automated fixes hold up across different codebases, and you should treat any auto-generated security PR as something to review carefully rather than merge blindly.
Key Features
Continuous Scanning: Autonomous agents run 24/7 against your live app rather than relying on scheduled scans or one-off pentests.
Real-Exploit Validation: Confirms vulnerabilities by actually exploiting business-logic and access-control flaws, not just flagging suspicious patterns.
Auto-Fix Pull Requests: Ships a working fix as a PR instead of a list of issues for you to triage.
Prompt-Injection Coverage: Tests specifically for the kinds of AI-specific flaws that traditional AppSec scanners miss.
Compliance Reporting: Growth-tier plans include compliance-ready reporting for scaling teams.
Pricing
Starting price
$99/month (Pro plan, billed monthly, 1,800 credits/month)
Explorer (Free): $0/month, 900 credits, first findings within 20 minutes, good for evaluating on a single app.
Pro: $99/month, 1,800 credits, continuous protection with full vulnerability details and auto-fix PRs.
Growth: $499/month, 5,400 credits, compliance-ready reporting and advanced coverage for scaling teams.
Enterprise/MSSP: Custom pricing, multi-tenant portal, private deployment, custom SLA.
Disclaimer: pricing may change, confirm on Perfai's own pricing page before buying.
Pros
Fixes, Not Just Findings: Ships an actual pull request instead of leaving remediation entirely to your team.
Built for AI-Coded Apps: Targets the specific gaps left by Replit, Lovable, Cursor, and similar tools, not generic web scanning.
Free Tier to Test First: The Explorer plan gives first findings within 20 minutes on a single app before you commit to paying.
Real Business Backing: Has a Microsoft Marketplace listing and Crunchbase profile, unusual for a week-old launch.
Cons
Too New for Independent Reviews: Launched July 2026, so there's no third-party track record on fix quality or false-positive rates yet.
Auto-Fix Trust Is Unproven: Merging an AI-generated security fix without careful review carries its own risk.
Pro Tier Jumps Fast: Growth plan is $499/month, a steep step up from the $99 Pro tier for teams that outgrow it.
No Affiliate Program Found: We found no public affiliate or partner program at the time of writing.
What Makes It Unique
Auto-Fix PRs: Goes beyond detection to open a working pull request that fixes the vulnerability it found.
Kay Score
6.5
/ 10
Tool Information
Pricing
$99/month (Pro plan, billed monthly, 1,800 credits/month)
Category
Coding & Development
Platform
Web / iOS / Android
Last Updated
