Our pricing plans
DEVELOPER
Free
For developers for getting started with App Sec
- Unlimited Scanning for Single App
- SCA, SAST, DAST, Secret Scanning
- Single user
- Result Retention for Last 5 Scans
- AI/ML Processing
- Downloadable Vulnerability Report (XLS)
TEAM
Contact Us
For small-sized companies
- All in the developer plan
- Unlimited Scans for 10 apps
- Access for 1 admin and 5 non-admin users
- Results Retention for the last 10 scans of each app
- Boman email and chat support
- Boman Vulnerability Management
BUSINESS
Contact Us
For medium-sized companies
- All in Teams Plan
- Unlimited Scans for 20 more Apps
- Access for 5 more non-admin users
- Results Retention for the last 20 scans of each app
- Security and Compliance Report
- Advance Analytics
ENTERPRISE
Contact Us
For enterprises with multiple DevOps Teams
- All in Business Plan
- Unlimited Scans for Unlimited Apps
- Customized Options for multiple teams
- Results Retention for the Last 6 Months
- Security and Compliance Report
- Integration with Jira, Slack, and Boman expert support
Frequently Asked Questions
Boman.ai is an application security orchestration and correlation tool. It integrates many application security scans in DevOps or Non-DevOps environments. It also orchestrates DAST, SAST, secret scanning, and software composition analysis for the application code.
You will receive product support via emails and chats in the Team and Business plan.
You may also access consultant support. It's only available for enterprise plans. In consultant support, our experts help the developer team to fix the vulnerabilities.
Currently, we are only supporting open source tools for various security scanning. In case you want us to enable any support for commercial tools, please write to us at support@boman.ai.
Boman.ai has an open-source script 'Boman-cli'. It operates in the client environment. This script brings the right security tools together to perform various scans. All the scan results are locally saved on the disc and the same is utilized by our ML APIs to filter false positives. We do not read the client's application code, we only read the scanner outputs.
