Home / Directory / AI SaaS tooling / AI code security / Corgea
Corgea
San Francisco company from Y Combinator's Summer 2023 batch that scans code, packages, and infrastructure for vulnerabilities, including business logic flaws, and writes fixes developers can apply.
Engineering and security teams at small and mid-sized software companies that want AI scanning and fixes with published per-developer prices.
Large enterprises that want a long-established vendor, or teams that only need a basic open-source scanner.
Verdict
Corgea is a San Francisco application security company that finds vulnerabilities in code and writes fixes developers can review and merge. It suits smaller engineering teams that want AI scanning and fixes across code, packages, and infrastructure. Its focus on business logic flaws targets the bugs older pattern-matching scanners tend to miss.
Score Breakdown
How Corgea scores in the categories that matter to its buyers.
Pricing
Corgea publishes monthly per-developer prices for its self-serve plans, with minimum team sizes, and sells Enterprise on custom terms.
| Plan | Price | What stands out |
|---|---|---|
| Free | $0 | Up to 2 developers, 10 pull request scans a month |
| Growth | $39 / developer / month | Minimum 5 developers, unlimited pull request scans |
| Scale | $49 / developer / month | Minimum 20 developers |
| Enterprise | Custom | Unlimited developers, procurement and compliance support |
The Field at a Glance
How Corgea compares with other AI code security vendors we reviewed, by Overall Score and relative typical engagement cost.
Corgea scores 7.9 in AI code security, under ZeroPath (8.0), and ahead of DryRun Security (7.6) and Pixee (7.5). Relative cost lands lower for this subcategory.
Use-case matrix
| Use case | Fit | Notes |
|---|---|---|
| Business logic and auth flaws | Strong | Looks for missing auth checks and logic bugs in real code paths. |
| Automatic fixes | Strong | Writes fixes developers review in their usual workflow. |
| Code host coverage | Strong | Works with GitHub, GitLab, Azure DevOps, Bitbucket, and Harness. |
| Free plan | Strong | Two developers at no cost. |
| AI pentesting | Mixed | A newer add-on that tests running apps with AI agents. |
| Vendor size | Weak | A small team founded in 2023. |
Who it’s for
Good fit
- Small and mid-sized software teams
- Security teams short on triage time
- Companies replacing several scanners
Poor fit
- Enterprises wanting a long vendor track record
- Teams needing only a free open-source scanner
- Buyers who want a managed security service
Review Excerpts
Below are excerpts from public reviews. Our team scoured public reviews, forums, and chat rooms to get a balanced view of customers' experience with this company. Paid reviews and pay-for-play sites such as Clutch were excluded.
Corgea says production customers such as Zapier and Yageo see about 20% more true positives and about 90% fewer false positives than with their previous scanners.
“This is why I am really excited about and impressed with Corgea AI code scanning capabilities, as it adds coverage for a blind spot which SAST and current security tooling can't overcome.”
Corgea's paid plans carry team minimums, with Growth at $39 per developer for at least 5 developers and Scale at $49 per developer for at least 20, so the free plan stops at 2 developers.
Company Facts
- Founded
- 2023 (Y Combinator)
- Headquarters
- San Francisco (Y Combinator)
- Accelerator
- Y Combinator, Summer 2023 batch (Y Combinator)
- Team size
- 6 (Y Combinator)
- Seed funding
- $2.6M led by Shorooq Partners (Corgea newsroom)
- Founder
- Ahmad Sadeddin (CEO) (Y Combinator)
- Website
- corgea.com
Key Leadership
Ahmad Sadeddin
Founder and CEO
Methodology
This page is an independent evaluation of Corgea for buyers comparing options in AI code security. AI Industry Reviews accepts no sponsorships, advertising, or pay-for-placement fees. Corgea did not pay for this review.
What we scored
The headline number is an Overall Score on a 0-10 scale. Eight criteria sit under it in two groups.
- Buyer outcomes (for AI code security)
- Finding business logic flaws
- Fix quality
- Cost for smaller teams
- Vendor maturity
- Company & commercial
- Innovation & product leadership
- Project management & communication
- Pricing
- Contract fairness
Pricing measures whether the price looks fair for the value delivered, including packaging and renewal friction that show up in real buying cycles.
Score Composition
| Input | Weight | What it covers |
|---|---|---|
| Reviews | 40% | A proprietary read of what practitioners say about likes, complaints, and day-to-day use, including public review sites, forums, and private chat rooms. Paid reviews and pay-for-play sites such as Clutch are out of scope. |
| Product | 35% | Hands-on look at screens and workflows. |
| Pricing | 15% | Whether the price looks fair for what you get. |
| Docs & training | 10% | Docs, tutorials, and training material. |
How we balanced the evidence
The Overall Score is the simple average of the eight criteria. Recommendation language follows that score and the fit pattern described above.
Scope
Corgea is graded here as AI code security. Criteria scores can move as more review volume and product checks are added.