What Tablif read on Nurbak's site
Nurbak describes itself as: “AI Pentester & Code Security Scanner | Scan your GitHub repo free, Nurbak”
- Price model: Monthly · free tier
- Free tier: Free forever
- Stage: Live, no waitlist
- How it differs: “The AI pentester with its own model. Your code never goes to third parties, and nothing is stored.”
What it is
Calls itself “AI pentester” and “code security scanner”.
- Calls itself: AI pentester · code security scanner
“AI pentester”
“…code security scanner”
Where it puts itself
Claims “fastest”. Rules out “store your code”. Publishes a comparison page.
- Superlative claim: fastest
- Says it will not: store your code
“The AI pentester with its own model. Your code never goes to third parties, and nothing is stored.”
“The fastest way to find vulnerabilities in your code.”
What it costs
Monthly subscription. A free tier, free forever. Has an enterprise plan. Sales on request. Prices quoted: USD 0, USD 199, USD 79/month.
- Monthly: yes
- Free plan: free forever
- Price: USD 0 · USD 199 · USD 79/month
- Enterprise plan: yes
- Contact sales: yes
“USD 0 per repo”
“Up to 5 repos USD 199 per month”
Who it sells to
Sells to businesses. Built for enterprise, small businesses and teams. Made for banks, fintech and insurance. Available in 3 languages.
- Sells to: businesses
- Company size: enterprise · small businesses · teams
- Made for: banks · fintech · insurance
- Languages: English · Portuguese · Spanish
“Enterprise with SSO, SIEM, compliance reporting and on-premise deployment.”
“Startup (5 engineers, 1 API)”
How it runs
A web app. Hosted in the cloud. Offers an API. Open source. AI is the core of the product. Built with Google Analytics and Umami.
- Kind: web
- Runs where: cloud / hosted
- API: yes
- Open source: yes
- AI role: core to the product
- Analytics: Google Analytics · Umami
“Connect GitHub and our own self-hosted model reads your repo like an attacker would”
“Nurbak is an AI pentester with its own model.”
What it works with
Integrates with GitHub, Jira and OSV.dev. Names Anthropic, Bitbucket and 2 more on its pages.
- Integrates with: GitHub · Jira · OSV.dev
- Names: Anthropic · Bitbucket · GitLab · +1
“…your code never goes to OpenAI or Anthropic, and we store nothing after the analysis.”
“Only GitHub is supported today. GitLab and Bitbucket are not.”
What it offers as proof
Live, no waitlist. Shows customer logos. Compliance: SOC 2. Trying it asks for an email. Publishes docs and a blog.
- Customer logos: yes
- Compliance: SOC 2
- Instant signup: yes
- Trial asks for: an email address
“Create account and connect GitHub”
“Teams that already trust Nurbak”
Sources
Tablif read these pages, last on 9 Oct 2026. Everything above is what the product says about itself; Tablif does not verify every claim.
Similar products in Tablif Town
- VibeDefend by CybeDefend: The one command line to secure your Cursor and Claude Code
- TheVibeSecurity: Find the security holes in your AI-built app
- Hakscan Ai: Your AI wrote the code. We check it.
- Neural Sentinel: Open-source AI scanner. Map vulnerabilities to ISO 42001.
- Grepleaks: AI-powered pentesting with 900+ tools in one environment
- Guile: Secure your Stack
- PromptBrake Free Tools: Free AI test inputs and release plans, in your assistant
- Optisec Recon Pro: The first Arabic-native AI vulnerability scanner