Notra vs PerfAI
Both of us run autonomous AI pentests — same category, so this page is about the differences that matter: how you pay, and what evidence the resulting report includes.
| Aspect | Notra — $149 flat audit | PerfAI — credit-metered |
|---|---|---|
| Category | Autonomous AI pentest: an agent probes your live app and reports verified findings, no human in the loop. | Also autonomous AI pentest for live apps. Same category — we will not pretend otherwise. |
| Target market | Any live web app — the same agent, at the same flat price, whether the code was written by a team or generated by an AI. | Positions specifically for AI-built and 'vibe-coded' applications. |
| Pricing model | ✓ $149 flat, one-shot. The audit is not metered by credits; the report records the findings that pass its verification gate. | Credit metering: the free plan lists 500 credits/month for 1 app; paid plans list Pro at $49/month per app and Startup at $299/month per app. |
| Evidence transparency | Evidence is shipped with findings that pass verification, with the report scope stated up front. | Evidence format and credit consumption should be confirmed against the vendor's current product terms. |
| Provenance of a run | ✓ Every run ships a manifest that pins the settings, plus a viewable reasoning trace and a public abuse contact on every request. | The agent produces a narrative of what it did. |
| Social proof | A young product; evaluate the manifest and evidence model directly. | Evaluate the vendor's current references and independent reviews during procurement. |
| Free tier | The scorecard is free forever, plus a first verified audit after you prove ownership of the target. | 500 credits/month for 1 app on the free plan. |
PerfAI plan and allowance details: official pricing (checked September 2026).
When Notra is the right buy
Evidence in the report
Notra attaches available evidence to findings that pass verification.
One price, one scan
$149 flat — no credit balance decides whether you can run that audit.
You want to verify, not trust
Every run ships a manifest pinning its settings, a viewable reasoning trace, and a public abuse contact. Check the work instead of reading the brochure.
When PerfAI wins
PerfAI positions its product for AI-built applications and publishes a free credit allowance. Review its current target scope, evidence format, and paid-plan terms against your own workflow before choosing. The honest version of this page says both products have different pricing and positioning.
Questions people ask before choosing
How should I compare credit-based pricing?
Metering can work when credits, target scope, and included evidence are clear before you commit. Ask each vendor what one scan costs, what it covers, and what evidence the resulting report includes.
What should I confirm about credit pricing?
Confirm the current credit allowance, target scope, and what evidence is included at each paid tier. Notra publishes a flat audit price and states its verification scope directly.
Which one should I use on a vibe-coded app?
Both will scan it. PerfAI specializes in AI-built applications and has built per-tool landing pages around specific AI frameworks — if you want a vendor that speaks your stack's language, that is a real reason to look at them. Notra charges the same flat $149 for any live web app and includes supporting evidence for findings that pass verification.
It costs nothing, takes about a minute, and tells you whether a verified audit is worth your $149.
Prices and capabilities referenced from public sources as of September 2026. Competing on facts — if anything here is out of date, tell us and we will fix it. Related: pricing, the sample verified report, and how this compares with manual penetration testing.