the30top
EN

Endor Labs AURI

by Endor Labs

Secure code from coding agents, verified and fixed

Reviewed by the the30top research team · Last reviewed 2026-10-27

Overview

AURI plugs into coding agents such as Cursor, Claude Code and Codex to block malicious packages, verify code is secure, fix vulnerabilities and flag secrets, and it reviews PRs for architectural risk. Endor Labs says AURI is free forever for adding to any coding agent and runs on your infrastructure. Pricing for the wider platform is not published, and compliance certifications were not shown on the homepage.

Our verdict

A strong pick if your main risk is code written by agents and unvetted packages. The free AURI entry point lowers the barrier, but platform pricing needs a sales call.

Best for

Security and platform teams governing AI coding agents at scale.

Avoid if

You just want a lightweight PR commenter.

Pros

  • Free entry point for coding agents
  • Runs on your infrastructure
  • Large named customer list

Cons

  • Platform pricing not published
  • Compliance details not on homepage
  • Broader than PR review alone

Key capabilities

Secure code generation checks for coding agentsMalicious package blockingVulnerability fixes and secrets flaggingPR review for architectural riskInventory of agents, models and MCP serversDependency and container image management

Frequently asked questions

Is AURI free?

The site says AURI is free forever for adding to any coding agent. Wider platform pricing is not published.

Which coding agents does it support?

The site lists Cursor, Claude Code, Codex, VS Code with Copilot and Antigravity.

Where does it run?

The site says it runs on your infrastructure.

More AI Code Review & AppSec Agents