# Pricing

> Airship pricing is tailored to your team and attack surface. Book a call to scope autonomous security agents for your APIs, web apps, code, and cloud.

Custom pricing. Autonomous security agents for your whole stack, scoped to your team and your attack surface.

- Autonomous security testing for APIs and web apps
- Source code, binary, and firmware security testing
- Pull request and CI/CD security reviews
- Cloud and infrastructure security testing
- Continuous vulnerability and CVE testing
- Accelerated incident response and remediation
- Self-host on your own infrastructure
- SAML, SSO, and role-based access control
- Priority support and updates

[Talk to us](https://cal.com/airship/discovery): A short call with the founders. No commitment.

## FAQ

### What does Airship secure?

Airship deploys autonomous security agents across your APIs, web apps, code, infrastructure, and cloud. They discover your attack surface, validate findings with proof-of-exploit, and deliver merge-ready fixes.

### Is my source code safe?

Your source code is never stored or used for model training. All model providers operate under zero data retention agreements. Enterprise customers can self-host in their own VPC or air-gapped environment.

### How long does setup take?

Minutes. Connect your repository, and Airship's agents get to work right away. First results typically arrive within 5 minutes.

### How are findings validated?

Every finding ships with a proof-of-exploit and reproduction steps, validated against your live environment. No theoretical risks — only confirmed, exploitable vulnerabilities.

### Can Airship auto-fix vulnerabilities?

Yes. Airship generates a fix, retests to confirm the vulnerability is gone, and delivers a merge-ready pull request. Review, merge, done.

### Does it integrate with my CI pipeline?

Yes. Airship plugs into your CI/CD pipeline and reviews every pull request for security issues. Vulnerable code is flagged before it can be merged.

### Can I self-host Airship?

Yes. Enterprise customers can deploy in their own VPC, on-premise, or in an air-gapped environment with complete control over infrastructure.

### How is Airship different from traditional scanners?

Traditional scanners rely on known signatures and produce noisy results. Airship's agents understand your codebase, business logic, and architecture, delivering context-aware findings with proof-of-exploit and auto-fix.

### Does it provide continuous monitoring?

Yes. Airship runs continuously, not just at deploy time. Your attack surface is monitored around the clock, and new CVEs are tested against your systems automatically.