What a token buys
Tokens track what a task actually costs to run. Nothing is rounded up in our favour, and anything served from cache is free.
Need more? Top up.
One-time packs, no subscription required. Purchased tokens never expire and are kept separate from your monthly allowance — cancelling a plan never touches them.
| Feature | Free | Pro | Team |
|---|---|---|---|
| Scanning — free on every plan | |||
| All 5 scanners | |||
| Every finding, every severity | |||
| Unlimited repositories & scans | |||
| CI mode (SARIF), pre-commit hook | |||
| Watch mode | |||
| MCP (Claude, Cursor, Copilot) | |||
| AI — paid for with tokens | |||
| Agentic penetration testing | |||
| AI explanations & fix steps | |||
| Security & compliance reports | |||
| Tokens per month | 500 | 3,000 | 10,000 / 20,000 |
| Buy more anytime | |||
| Team | |||
| Seats | 1 | 1 | 5 or 10 |
| Shared token pool & one bill | — | — | |
| Support | |||
| Community & docs | |||
| Priority support | — | ||
Does Trojan upload my code anywhere?
No. Trojan runs entirely on your machine. The only data sent to our servers is finding metadata (rule ID, scanner, severity, title) — never your source code.
What do I actually pay for?
Scanning. Every scanner, every severity, unlimited repositories — all free, because it runs on your machine and costs us nothing. Tokens are spent only when the AI works: an agentic penetration test, a plain-English explanation, a generated report.
What is a Trojan Token worth?
Tokens track what a task genuinely costs to run. An agentic penetration test is about 365 tokens, a security report 100, an AI explanation 5. Anything served from cache is free. Every plan and pack lists exactly how many you get.
What happens if I run out mid-scan?
The run pauses and is saved. Top up and it resumes exactly where it stopped — the agent keeps everything it had already found. Nothing is lost and you are never charged twice for the same work.
Do my tokens expire?
Tokens you buy in a pack never expire. Your monthly plan allowance rolls over for one month, so an unused month is not wasted, but it does not stockpile forever. The two are kept in separate buckets and your monthly allowance is always spent first.
What happens to my purchased tokens if I cancel?
You keep them. Cancelling ends your monthly allowance, but tokens you paid for outright are yours and stay in your account.
Can I cancel anytime?
Yes. No contracts, no lock-in. Cancel from your dashboard and your plan ends at the current billing period.
Do you offer refunds?
All sales are final. Because the Trojan CLI is a binary that can be installed and used immediately, and we have no way to verify removal from a device, we can't offer refunds. If you were charged in error, email hi@trojancli.com within 14 days.