> ## Documentation Index
> Fetch the complete documentation index at: https://docs.perfai.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Plans & Limits

> What the Free plan includes, which limits apply to it, and exactly what buying credits changes versus what requires an upgrade.

## Overview

Every Perfai organization starts on the **Free plan**. Free is a real working tier — your app is scanned with the *same* depth, the same detectors and the same agents a paying customer gets. Nothing about the test is reduced. What the Free plan limits is how much of the result you can see and take away, how many apps you can hold, and how often you can re-run a test.

<Note>
  Scan depth never varies by plan. The Free plan does not receive a lighter scan, a smaller category set, or a shallower crawl — it receives the full test and a narrower view of the findings.
</Note>

## What the Free plan includes

<CardGroup cols={2}>
  <Card title="900 credits per month" icon="coins">
    Refreshed automatically each month on your organization's signup anniversary. Unused plan credits do not roll over.
  </Card>

  <Card title="2 applications" icon="grid-2">
    A lifetime allowance — see the note under [Applications](#applications) below.
  </Card>

  <Card title="Top 5 findings unlocked" icon="unlock">
    Full detail — endpoint, evidence, reproduction and remediation — for your five highest-severity findings.
  </Card>

  <Card title="Full visibility of totals" icon="chart-simple">
    Real counts, severity breakdown, CVSS scores and OWASP/CWE categories for **every** finding, locked or not.
  </Card>
</CardGroup>

## Limits at a glance

| Area                           | Free plan                                                                                                                                             |
| ------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Finding detail**             | Top 5 findings by severity are fully unlocked. Beyond those, severity, CVSS and OWASP/CWE are shown but the title, endpoint and evidence are withheld |
| **Fixed & dismissed findings** | Not available                                                                                                                                         |
| **Scan evidence**              | Per-test request/response evidence on the Last Run view is not available                                                                              |
| **Reports & exports**          | PDF reports and CSV exports are not available, in the console, the chat agent or the API                                                              |
| **Integrations**               | Jira, GitHub, Linear, Slack, email and all other connectors require a paid plan                                                                       |
| **Fix Agent (IDE / MCP)**      | Requires a paid plan                                                                                                                                  |
| **Applications**               | 2, lifetime. Deleting an app is not available on the Free plan                                                                                        |
| **Application URLs**           | Must be a public domain name. IP addresses and temporary tunnel URLs (ngrok, Cloudflare Tunnel, localtunnel and similar) cannot be onboarded          |
| **Scheduled testing**          | Nightly, weekly and monthly automated scans require a paid plan                                                                                       |
| **Test frequency**             | 15 security tests per application per day, 30 per week                                                                                                |
| **AI assistant**               | Will not disclose the detail of a locked finding, but will always answer with counts, severities, CVSS and OWASP/CWE                                  |

## Credits versus plan — what each one unlocks

This is the distinction worth understanding before you buy anything:

<CardGroup cols={2}>
  <Card title="Credits control WHETHER you can scan" icon="battery-half">
    Every scan consumes credits. When your balance reaches zero, testing pauses until your monthly credits refresh or you add more. **Buying credits resumes testing immediately.**
  </Card>

  <Card title="Your plan controls WHAT you get" icon="key">
    Unlocked findings, exports, integrations, the Fix Agent, scheduled testing and additional applications are tied to your plan. **Buying credits does not change any of them.**
  </Card>
</CardGroup>

<Warning>
  **Adding credits does not lift the Free plan's feature limits.** A credit top-up restores your ability to run tests — it does not unlock findings beyond the top five, enable exports or integrations, or raise your application allowance. Those require upgrading to a paid plan.
</Warning>

### Which limits a credit top-up affects

| Limit                              | Lifted by adding credits?                              |
| ---------------------------------- | ------------------------------------------------------ |
| Testing paused at zero balance     | **Yes** — testing resumes as soon as credits are added |
| Everything else in the table above | No — these are plan features, not balance              |

The two are checked in order, credits first. So if you add credits and immediately hit a different message, that is the second limit talking — most often the per-application test frequency, which is deliberately set well above what a Free balance can fund and is rarely reached in normal use.

## Applications

The Free plan's application allowance is a **lifetime** allowance: it counts every app your organization has ever onboarded, not the number you currently hold. Deleting an app does not free a slot, and app deletion is not available on the Free plan. If you need to change which app you are testing, upgrade or [contact us](mailto:support@perfai.ai).

A domain can only be claimed by one organization on the Free plan. If your colleague has already onboarded your company's domain under their own account, ask them to invite you to their organization rather than registering a subdomain separately.

## Upgrading

Open **Credits** at the bottom of the sidebar, or go to the [Usage page](https://cloud.perfai.ai/usage), to see your current balance, compare plans and upgrade. Paid plans unlock every item in the table above and include a larger monthly credit allowance.

If you need something that does not fit a self-serve plan — a larger credit allowance, more applications, or a hybrid/on-premise deployment — [talk to us](mailto:support@perfai.ai).
