Where can we help you?
Search our FAQs on scanning coverage, exploitability analysis, pricing, and where your data lives.
Frequently asked questions
The Free plan includes SAST (Static Application Security Testing), SCA (Software Composition Analysis), secret scanning with standard detectors, and license discovery. You also get reachability and exploitability analysis within your monthly scan limit, plus 2 AI AutoFix PRs per month to experience our AI-powered remediation.
Exploitability analysis uses reachability and dataflow analysis to determine whether a vulnerability can actually be reached and exploited in your specific application context. Instead of treating hundreds of theoretical CVEs alike, you prioritize the ones that are reachable in your application. The Free plan includes it within your scan limit; from the Startup plan it becomes a headline capability with cross-file reachability and AI-assisted assessment.
- Active Verification is an optional capability that dynamically exercises your running application to confirm findings against a real target — for customers with a suitable test environment.
- Target ownership must be verified (DNS TXT, HTTP token, or repo-to-domain proof).
- You explicitly confirm authorization before each run.
- Rate limits and safe-mode presets are enforced by default.
- Full audit logs track who ran what, when, and against which target.
- Active Verification is available as an add-on for the Growth plan and included in the Enterprise plan.
The standard Farion hosted service processes and stores data in Farion-operated infrastructure in Germany (AWS Frankfurt, eu-central-1). Enterprise customers can agree dedicated deployment options within the EU or an on-premises deployment to suit their operating requirements.
- Shared SaaS: Hosted in Germany, tenant-isolated.
- Dedicated: From 100 contributors on most Kubernetes clusters — in your cloud or your data centre (cloud-native stack).
- On-premises and air-gapped: On the Enterprise plan.
AI AutoFix creates pull requests with suggested changes for detected vulnerabilities. Each PR explains the vulnerability and the reasoning behind the proposed fix. Your team reviews the changes before merge and deployment. Monthly allowances: 2 (Free), 10 (Startup), 50 (Growth) or custom (Enterprise).
Yes. Every new workspace starts with a 14-day free trial of the Growth plan: all features and up to 10 contributors, on your own code, no credit card required. When it ends you choose Startup, Growth or Enterprise, or continue on the Free plan; scanning pauses until you do, and everything you found stays.
Farion natively analyses JavaScript/TypeScript (Node.js), Python, Go, Rust, C, C++, C#, Java and Kotlin. The languages and frameworks overview lists which frameworks route discovery covers.
View languages & frameworksHaven't found the right answer?
Write to us at sales@farion.ai or book a technical demo.