mallcop

Free with your own key, or managed and live today.

Bring your own inference key and mallcop costs you $0. You pay only your model provider. Or skip key management entirely: managed inference on the donut rail is live now, pay-as-you-go or by monthly subscription.

Bring your own key: $0

Bring your own key
$0 /mo to mallcop
You pay your model provider directly
  • Full mallcop functionality
  • File + GitHub built in, plus AWS, Azure, GCP, M365, and Okta connectors
  • All 17 detectors and the full AI cascade
  • Committee consensus on every resolution
  • Git-native audit trail you control
  • Your key, your provider, your models
Get Started Free

Detection is rule-based and free. The AI cascade runs against the inference endpoint your key points at: Anthropic, OpenAI, Bedrock, or any OpenAI-compatible endpoint.

Mallcop monitors for anomalies. It does not guarantee detection of all security threats.

Mallcop is not SOC 2, ISO 27001, or FedRAMP certified. See Privacy and Security for our current compliance posture.

Managed inference 🍩 is live

Skip key management entirely. On the donut rail, mallcop.app holds the inference key and meters your usage in donuts. Scanning and detection stay free either way; only the AI cascade (triage, investigation, committee consensus) draws down donuts. Checkout is real (Polar, hosted) and inference is metered live today.

🍩

Patrol

Quick check: is this finding normal or does it need a closer look?

Triage tier of the cascade
🍩🍩

Investigate

Deeper dig across event history and cross-finding correlation.

Investigation tier of the cascade
🍩🍩🍩

Consensus

Independent re-votes before a finding is allowed to close as benign.

Committee consensus gate

Donut packs: pay as you go

One-time top-ups. No subscription, no expiry until spent.

100 Donuts
$5.00 one-time
100 donuts, no expiry
Buy
200 Donuts
$10.00 one-time
200 donuts, no expiry
Buy
500 Donuts
$25.00 one-time
500 donuts, no expiry
Buy

Live product catalog: api.mallcop.app/api/billing/products. Donut packs route at the Open sovereignty tier.

Subscriptions: monthly donut allocation

A fixed monthly donut allocation at a flat price. Pick a sovereignty tier, Open (any provider, best price), Allied (US/EU/Five Eyes only), or US-Only (US-headquartered providers only), which constrains where your donuts route. Each tier is also available as a Boost variant at a higher monthly price (same donut allocation); pick it from the sovereignty table below or at checkout.

Basic
$4.99/mo (Open)
500 donuts/month
SovereigntyBaseBoost
Open $4.99 $8.99
Allied $6.49 $11.69
US-Only $7.49 $13.49
  • 1–3 monitored services
  • 500 donuts/month, resets each billing cycle
Subscribe (Open)
Pro
$19.99/mo (Open)
1,200 donuts/month
SovereigntyBaseBoost
Open $19.99 $34.99
Allied $25.99 $45.49
US-Only $29.99 $52.49
  • Larger monitoring footprint
  • Self-improvement features (see the self-extension docs)
  • 1,200 donuts/month, resets each billing cycle
Subscribe (Open)
Team
$79.99/mo (Open)
5,000 donuts/month
SovereigntyBaseBoost
Open $79.99 $139.99
Allied $103.99 $181.99
US-Only $119.99 $209.99
  • Larger monitoring footprints
  • Configurable sovereignty tiers
  • 5,000 donuts/month, resets each billing cycle
Subscribe (Open)

1 Donut = 5,000 tokens of AI inference compute. Out-of-plan usage is covered by Dollar Credits at $0.05/donut (the same rate as the 500-donut pack above). Payments are processed by Polar (Merchant of Record). Full terms: Terms of Service §5–7.

Frequently Asked Questions

Is mallcop really free?
Yes, with your own inference key. You get full functionality, all connectors and detectors, the AI cascade, and the git audit trail. You pay only your model provider (Anthropic, OpenAI, Bedrock, or any OpenAI-compatible endpoint) for the tokens the investigation cascade uses. Scanning and the deterministic detectors are always free, on every plan.
What are donuts, and can I buy them?
Donuts are the unit of account for managed inference, one unit of mallcop compute, so you think in operations instead of tokens. Yes, you can buy them today: a one-time pack (100/200/500 donuts, $5/$10/$25) or a monthly subscription (Basic/Pro/Team) with a recurring allocation. Checkout is live, hosted by Polar.
Do I lose detection if I don't pay?
No. Scanning and the deterministic detectors are always free. The AI cascade runs against whatever inference you bring, your own key or a donut balance. There is no paywall on the core monitoring loop.
What about Chinese-origin models?
Managed subscriptions let you choose a sovereignty tier that restricts the provider pool: Open (any provider, including Chinese-origin models), Allied (US/EU/Five Eyes/allied nations only), or US-Only (US-headquartered providers only). Regardless of tier, inference is routed through AWS Bedrock in US regions; sovereignty governs the model provider's headquarters, not where compute runs, and is not a compliance certification (see Terms §7). With BYOK, the provider is entirely your choice.