Harbor Artificial Contact
Menu Close

Retainers · S-RET-1

Monthly PR / Code Security Review

Security review on every pull request.

Scope. Not a penetration test, audit, or certification; no guarantee of breach prevention; written authorization required before any active testing.

Compare 3 tiers Book a call

Pricing

Compare tiers

Retainers are prepaid monthly.

Starter

$800 /mo

Hours. 6 hours

Scope. ≤10 PRs/month, 6 h cap

Deliverables

  • PR comments
  • monthly summary

Turnaround. ≤2 business days per PR

Subscribe ($800 / month) (opens Stripe in a new tab)

Prepaid monthly, month-to-month, with 30 days' written notice to cancel. Unused hours do not roll over. An optional 3- or 6-month term is still billed monthly in advance.

Terms cover this engagement. A statement of work controls the scope.

Scope. Not a penetration test, audit, or certification; no guarantee of breach prevention; written authorization required before any active testing.

Standard

$1,500 /mo

Hours. 12 hours

Scope. ≤25 PRs/month, 12 h cap

Deliverables

  • Starter items
  • monthly trend report

Turnaround. ≤2 business days per PR

Subscribe ($1,500 / month) (opens Stripe in a new tab)

Prepaid monthly, month-to-month, with 30 days' written notice to cancel. Unused hours do not roll over. An optional 3- or 6-month term is still billed monthly in advance.

Terms cover this engagement. A statement of work controls the scope.

Scope. Not a penetration test, audit, or certification; no guarantee of breach prevention; written authorization required before any active testing.

Advanced

$2,900 /mo

Hours. 24 hours

Scope. ≤60 PRs/month, 24 h cap

Deliverables

  • Standard items
  • quarterly secure-coding session

Turnaround. ≤1 business day per PR

Subscribe ($2,900 / month) (opens Stripe in a new tab)

Prepaid monthly, month-to-month, with 30 days' written notice to cancel. Unused hours do not roll over. An optional 3- or 6-month term is still billed monthly in advance.

Terms cover this engagement. A statement of work controls the scope.

Scope. Not a penetration test, audit, or certification; no guarantee of breach prevention; written authorization required before any active testing.

Scope

Deliverables, limits, and standards

Standards mapping

OWASP Top 10:2025; CWE; NIST SSDF PW.7.

Exclusions

  • Unused hours do not roll over
  • emergency response
  • on-call

Acceptance

Monthly summary lists every reviewed PR and finding status.

Scope. Not a penetration test, audit, or certification; no guarantee of breach prevention; written authorization required before any active testing.

Book a call All security services

More in Retainers

Not sure this tier is the one?

Email [email protected] with the system you want reviewed. We will point at a tier in this catalog, or tell you if the work is outside it.

Book a call All security services