Skip to content
LockShip

Pricing

Three things, and you only pay after you’ve seen your result

We wanted pricing you can read in a minute. There’s no account to create and no plan to pick before you know whether you even have a problem. You scan for free, you see the worst thing we found, and then you decide.

Free scan

$0

  • You prove you own the domain first: a DNS TXT record, a meta tag, or a small file.
  • We read your app the way a stranger would. GET and HEAD requests only, and at most one row from any table, redacted.
  • You get a score out of 100, how many critical, high, medium and low findings there are, and the worst one in plain English.
  • You also see the names of anything we saw but deliberately didn’t test.

Not included: the other findings, the proof, fix prompts, SQL, the PDF and the badge.

Run a free scan
Launch Safe certificate

$39 one time

  • Every finding from your scan, each with what a stranger can see (values redacted).
  • A fix prompt written for your builder: Lovable, Bolt, v0, Replit, Cursor, or plain wording if we can’t tell.
  • Row Level Security SQL when a Supabase finding needs it.
  • The whole report as a PDF.
  • 7 days of re-scans from the day you pay, so you can fix things and check again.
  • A badge and a public certificate page, once a re-scan after payment finds no critical or high issue.

It covers one scan of one site. The badge isn’t guaranteed: the first scan never issues it, and a re-scan only does if it passes.

Start with the free scan
Monitor

$9/month

  • Starts after you hold the certificate, for the same scan.
  • We re-scan your app about once a week, on our schedule, without you lifting a finger.
  • While it’s active you can also re-scan from your report whenever you like.
  • If a weekly scan finds a critical or high issue, the badge turns grey and says “Check failed” until a re-scan passes.
  • If you cancel, the badge shows “Expired” once the paid month runs out.

It doesn’t watch your app between scans, and it doesn’t send an alert email when a weekly check fails yet. Your report page and the badge always show the latest result.

Start with the free scan

How paying works

You buy from the free summary page once your scan has finished. Checkout is Stripe’s own page, so we never see your card number. Prices are in US dollars. The company behind LockShip is NextGen Ventures, and that’s the name on our terms.

After paying, Stripe sends you back to a page that confirms it and links to your full report. Bookmark that link. There are no accounts, so the link is how you get back to your report.

If you’d like to see exactly what the paid report looks like before you scan anything, we put a full sample report online, built from a throwaway test app with fake keys.

Questions

Is this a penetration test?
No. It’s a read-only check from the outside for the mistakes AI-built apps make most often: open tables, keys in the JavaScript, exposed files, missing headers. It never signs in and never sends attack payloads, so a person testing your app properly will find things we can’t.
Will you write to my database?
No. Every request is a GET or a HEAD. Database reads fetch at most one row, and the values are redacted before anything is stored.
What if the free scan finds nothing?
Then the summary says so, and nothing is held back. $39 still gets you the PDF, 7 days of re-scans, and the badge if a re-scan after payment passes.
Do you offer refunds?
If you pay for a certificate and the report or the PDF doesn’t come through, email hi@lockship.dev within 14 days of the charge and we’ll deliver it or refund that charge. We don’t refund because a later review disagrees with a finding, or because a badge isn’t a security guarantee.
How do I cancel Monitor?
There’s no account dashboard yet, so email hi@lockship.dev and we’ll cancel the subscription in Stripe. Weekly scans stop, and the badge shows “Expired” once the month you’ve paid for runs out.
I have more than one app.
Each app gets its own scan and its own certificate, at $39 each, and Monitor is $9 a month per app. There’s no bundle price yet.

The full wording is in the terms and the disclaimer. Anything else, write to hi@lockship.dev.

Start with the free part

It takes a few minutes, most of which is publishing the DNS record or the file that proves the site is yours.

Run a free scanSee a sample report
Pricing: free scan, $39 certificate, $9/month Monitor · LockShip