Code Audit Pricing
Scanning a public repository on SystemAudit.dev is free, with no card and no signup. A Quick Audit of the biggest problems is $19. A full audit is priced by project size: $49 up to roughly 30,000 lines of code, $99 up to 75,000, and $199 up to 150,000. Larger codebases are quoted individually. You run the scan first and see your price before deciding.
What each tier includes
Free scan
Public repositories
$0
- Security and secrets scan — exposed API keys, .env files, credentials
- Every critical and high finding with its exact file, line and redacted snippet
- Dependency analysis across 9 ecosystems
- Handoff Readiness and Supply Chain Resilience grades
- Architecture Map — the interactive system graph, unlocked with your email
Quick Audit
What are the biggest problems?
$19 one report
- Everything in the free scan
- Your top 5 risks from the AI analysis, ranked, each checked against your source
- The two most urgent groups of the fix-first plan: fix now, and before you raise or sell
- Area-by-area view of whether one person holds each part of the code
- Projects up to 150,000 lines of code
Full audit
Public and private repositories
$49 – $199
- Everything in the Quick Audit, with every finding rather than the top five
- Private repository support
- AI Readiness Grade — A–F across five dimensions
- Business translation: cost-to-fix, cost-if-ignored, ROI
- Architecture diagram in the technical appendix
- The whole fix-first plan, including what can wait, and an exportable PDF
- A fix prompt for each finding, ready to paste into Cursor, Lovable or Claude
- Re-scans of a repo you've paid for are included, to track progress after fixes
How your price is decided
The scan measures your codebase, then the tier follows from its size. Nothing is estimated up front and nothing changes after you see the number.
| Project size | Lines of code | Price | Typical project |
|---|---|---|---|
| Small Project | up to 30K | $49 | Early-stage product, typically built by 1-2 developers |
| Medium Project | up to 75K | $99 | Growing system with multiple features, estimated 2-4 developers |
| Large Project | up to 150K | $199 | Complex system with multiple modules, 4+ developers over time |
| Enterprise System | 150K+ | Custom | Large-scale codebase — requires a dedicated analysis |
Built with Cursor, v0 or Bolt? Most AI-generated projects come in under 30,000 lines, which puts them at $49.
When you need a person's name on it
For a raise, a sale or an acquisition, the technical due diligence review takes the full audit and has Nic Chin, who built SystemAudit.dev, check the findings against the repository, add what automation can't judge, and sign a written summary, with a walkthrough call. It starts at $1,500; scope and price are confirmed by email before anything is charged.
Request a technical due diligence reviewAuditing more than one repository
The size-based tiers cover a single repository. If you audit repeatedly — an agency vetting client code, an investor screening deals, a team tracking several services — the multi-repo subscription is $29 per month and applies full audit access to every repository you scan, rather than to one.
It changes scope, not depth. Each repository is still read to the paid file limit for its size — 80, 160 or 240 files — and scanning is capped at 20 scans an hour. Repositories above 150,000 lines are quoted separately either way.
Subscribe — $29/monthQuestions first? Ask about the multi-repo plan.
Pricing questions
How much does a code audit cost on SystemAudit.dev?
A scan of a public repository is free. A Quick Audit, which shows the top five risks and what to fix first, is $19 for one report of a project up to about 150,000 lines. A full audit is priced by project size: $49 up to about 30,000 lines of code, $99 up to about 75,000, and $199 up to about 150,000. Codebases larger than that are quoted individually. A human-reviewed technical due diligence report starts at $1,500. You scan first and see your price before paying.
Why is the price based on lines of code?
Project size determines how much work an audit is: how many files are read, how many components are mapped, and how much analysis the report has to hold. Charging by size means a small AI-built project is not subsidising a large enterprise codebase. Your line count is measured during the scan, so the price is not an estimate.
What do I get without paying anything?
The free scan covers public repositories and returns the security and secrets scan, dependency analysis, and Handoff Readiness and Supply Chain Resilience grades. Every critical and high-severity finding shows its exact file, line and a redacted snippet without a signup — the location of an urgent problem is never gated.
Do I need a credit card to run the first scan?
No. The free scan on a public repository needs no card and no signup. You only pay if you choose a full audit after seeing what the scan found.
Is there a plan for auditing several repositories?
Yes. The multi-repo subscription is $29 per month and grants full audit access across every repository, rather than being scoped to one. It suits agencies, investors and teams running audits repeatedly instead of once. It widens what you can audit, not how deeply: each repository is still read to the file limit for its size, and scanning is capped at 20 scans an hour.
Can SystemAudit.dev audit a private repository?
Yes, on the paid tiers. You connect your GitHub account securely and the analysis runs without your code being stored. The free tier covers public repositories only.