BrainblastbrainblastComing soon
Pricing

Pay for leverage, not access.

The corpus itself is open — anyone can read and sample it, no signup. You pay for the fixtures you train on: license the curated lots for your stack, or take the whole corpus with Scale.

What you're buying

One VTI = one proven SDK bug

A Verified Trap Instance is a single, machine-checked record of a way an SDK trips up code — captured as failing code, the fix, and a test that proves the difference. The corpus is a growing library of them. Everything below is a way to use that library.

SDK + exact version
Pinned to the release the bug lives in — e.g. @solana/web3.js 1.95.3.
The failing code (RED)
A minimal repro of the bug — compiles, runs, and fails the way the SDK trips up real code.
The fix (GREEN)
The corrected code that does the same job the right way.
The test
One test that proves RED fails and GREEN passes — the diff is the lesson.
Oracle receipt
A machine re-verification anyone can replay. No trust, no answer key.
How pricing works

Priced by coverage. Bought three ways.

Priced by coverage, not count

A lot's price tracks the distinct lessons it teaches — footgun patterns × SDKs covered × quality (severity and independent corroboration) — snapped to clean tiers. You pay for leverage, not row count, so a dense lot costs more than a big-but-shallow one.

Three ways to buy

A single lot for the ecosystem you ship on; a package — Web3 (both chains) or AppSec (every web, backend, cloud & crypto lot) — at a discount; or Scale, every lot plus every lot we add next. Low floor, clear ceiling.

Every license includes

The full RED + GREEN fixtures and the proving test for each record · the live verified delta as the fleet finds more, zero holdback · a signed grant issued instantly at checkout · pay in SOL, USDC, or $BRAIN for a standing 10% off.

Web3save 20%
$5,600/ yr$7,000
or $560/mo billed monthly
Both blockchain lots — for teams shipping on-chain.
Includes · Solana + EVM
Every vulnerable + fixed fixture
Live verified delta, zero holdback
SOL, USDC — or $BRAIN for 10% off
Get Web3
AppSecsave 30%
$11,600/ yr$16,500
or $1,160/mo billed monthly
Every web, backend, cloud & crypto lot — the full AppSec surface.
Includes · Auth & Sessions + Transport & TLS + Web Hardening + Cloud & Storage + Cryptography + Browser & Desktop
Every vulnerable + fixed fixture
Live verified delta, zero holdback
SOL, USDC — or $BRAIN for 10% off
Get AppSec
Scalesave 32%
$16,000/ yr$23,500
or $1,600/mo billed monthly
The whole corpus, the live firehose, and every lot we add next.
Includes · Every lot + all future lots
Every vulnerable + fixed fixture
Live verified delta, zero holdback
SOL, USDC — or $BRAIN for 10% off
Get Scale

Or buy by the lot

priced by coverage — patterns × SDKs, not raw count
Solana$3,500/yror $350/mo
On-chain money & auth traps — commitment, preflight, royalties, slippage.
407 VTIs · 32 patterns · 24 SDKs
EVM$3,500/yror $350/mo
Ethereum-stack traps — unconfirmed transactions, zero-slippage swaps, tx.origin auth.
644 VTIs · 70 patterns · 46 SDKs
Auth & Sessions$3,500/yror $350/mo
JWT, sessions, cookies, CORS credentials — the login surface.
1025 VTIs · 33 patterns · 23 SDKs
Transport & TLS$3,500/yror $350/mo
Disabled certificate verification across HTTP/DB/message clients (MITM).
367 VTIs · 17 patterns · 24 SDKs
Web Hardening$3,000/yror $300/mo
Security headers, CSP, CSRF, GraphQL introspection, HTTP smuggling.
263 VTIs · 16 patterns · 6 SDKs
Cloud & Storage$1,500/yror $150/mo
Public-read ACLs, block-public-access off, storage & bucket misconfig.
122 VTIs · 4 patterns · 3 SDKs
Cryptography$3,000/yror $300/mo
Broken hashes & ciphers in app code — MD5, SHA-1, DES, weak key sizes.
438 VTIs · 11 patterns · 6 SDKs
Browser & Desktop$2,000/yror $200/mo
TLS bypass & sandbox-off in Playwright, Puppeteer, Electron.
704 VTIs · 7 patterns · 3 SDKs
OtherScale-only
Uncategorized — bundled into Scale only.
94 VTIs · not sold à la carte
Browse free
Read the whole catalog and pull a receipt-only sample — no signup, no wallet.
Browse
Evaluate your model or agent
We run it against a held-out slice of the corpus and hand you a scorecard of which bugs it still ships — re-run every release.
Book an eval
Sponsor scouting
Point the autonomous fleet at your stack — fund verified findings for the SDKs you build on.
Talk to us

Common questions

So what am I actually buying?

A training license to curated slices of the corpus. The catalog is open to read; you pay for the fixtures — the vulnerable+fixed code and tests you train on. Buy the lots that match your stack — each priced by its coverage — or take everything, including every future lot, with Scale.

What's in a lot, and how are they split?

Each lot is a coherent slice of the corpus for one ecosystem or security domain — the blockchain lots (Solana, EVM), plus auth & sessions, transport/TLS, web hardening, cloud & storage, cryptography, and browser/desktop. A lot ships every vulnerable+fixed fixture in that slice plus its live verified delta as the fleet finds more. Scale is every lot at once, including lots we add later.

When does buying lots beat Scale?

One or two lots if you only ship on a single ecosystem. Once you'd want several, Scale is cheaper than buying them à la carte and includes every future lot plus the zero-holdback firehose — so most teams past a couple of lots take Scale.

What format does the data come in?

VTIs are JSON records with the code fixtures and tests as files, streamed as NDJSON. Browse pulls a receipt-only sample; a paid lot (or Scale) streams the full fixtures plus a live feed of new verified records as the fleet finds them.

Monthly or annual?

Both — pick the period when you build your license on the access page. Every lot, package, and Scale bills monthly or annually. Annual is the committed rate: 2 months free (~17% off) versus paying month to month. The $BRAIN 10% discount stacks on either.

How do I pay?

Self-serve checkout is on-chain: pay from any Solana wallet in SOL, USDC, or $BRAIN — $BRAIN takes a standing 10% off any lot, package, or Scale. Your signed grant is issued the moment the payment verifies. Prefer USD invoicing or custom terms? Contact sales from the access page. Whatever you pay, we route value to the contributors whose records you use.