The AI that thinks like an attacker.

Security-specialized models in our app or through one API, with zero data retention. Subscribe, or pay per token.

Finds the flaw, writes the fix.

Works with your languages and tools

A general-purpose model knows a little about everything. Ours are trained on logs, incident reports and vulnerabilities. They know what they’re looking for.

Three models, from reflex to investigation.

Pick by task. Same API, same response format, same key.

The lightest model. It classifies an alert, an email or a log line in milliseconds, fast enough to filter a live stream.

Context
32k
Input
$0.15per 1M tokens
Output
$0.60per 1M tokens
First token
~120 ms
  • Alert triage and false-positive reduction
  • Phishing email classification
  • High-throughput log filtering
API

Compatible with the OpenAI SDK. Change one line.

Keep your code. Point base_url at unbreach, pick a model, done. Read the API docs

from openai import OpenAI
import os

client = OpenAI(
    base_url="https://api.unbreach.io/v1",
    api_key=os.environ["UNBREACH_API_KEY"],
)

resp = client.chat.completions.create(
    model="rampart-1",
    messages=[{
        "role": "user",
        "content": "Analyze this log: "
                   "Failed password for root from 185.220.101.4 (x312)",
    }],
)
print(resp.choices[0].message.content)
Response from rampart-1

              
Input
41 tokens
Output
0 tokens
Cost
$0.00005

0days of data retention

Zero data retention. On every request.

Your prompts and our answers are processed in memory, then discarded. Nothing you send is written to disk, logged or used for training, in the app or through the API.

How we handle data

Never stored

  • Your prompts and messages
  • Model responses
  • Files and log exports you upload
  • Conversation history on our servers

Kept, for billing only

  • Token counts per request
  • Timestamp and model used
  • Account and API key ID
  • Invoices and payment records

What your teams do with it.

Alert triage

Drop the false positives and keep only what deserves an analyst’s attention.

Log analysis

Ask a question in plain English, get the SIEM query and the answer.

query = f"SELECT * FROM users WHERE id = {user_id}"

SQL injection. Use a parameterized query.

Code review

Injections, exposed secrets, vulnerable dependencies: caught before production.

Phishing

Headers, links and tone analyzed in a single request.

Incident reports

A raw timeline becomes a clear report, ready for leadership.

Two ways to pay.

A monthly plan for the app, or pure pay-per-token through the API. Zero data retention on both.

Pro

For heavy users, freelancers and consultants.

From $100 / month

Billed monthly

Get Pro

Everything in Plus, plus:

  • Choose 5x or 20x more usage than Plus
  • Higher output limits for long investigations
  • Priority access at peak times
  • Early access to new models and features

Usage limits apply. Prices in USD, excluding applicable taxes. Plans renew automatically until you cancel.

Frequently asked questions

A token is a piece of a word. In English, 1,000 tokens are roughly 750 words. Input tokens (your request) and output tokens (the response) are counted separately.

Each plan comes with a usage allowance that refills every hour. How far it goes depends on the model and the length of your conversations: bastion-1 uses it faster than sentry-1. Pro gives you 5x or 20x more usage than Plus.

You can wait for the next refill, switch to a lighter model, or add pay-as-you-go credits at API prices. We never charge you more without asking first.

Yes, at any time from your account. You keep access until the end of the month you already paid for.

No. unbreach is zero data retention by default, for the app and the API. Prompts, responses and uploaded files are processed in memory and discarded once the answer is sent. We only keep token counts and billing records, and nothing you send is ever used for training.

Yes. The API follows the OpenAI SDK format: change the base URL and the model name, and the rest of your code works as is.

In data centers located in the European Union. The Enterprise plan adds a dedicated instance or a deployment on your own servers.

Plans are a fixed price, billed monthly or yearly and renewed until you cancel. API usage is billed monthly on what you actually use, or from prepaid credits with a spending cap per key.

Yes. They grow automatically with your usage history. For a one-off spike, write to us at [email protected].

API access for your company.

Tell us who you are. We review every request within one business day, then you create keys and make your first request in minutes.

We email you a sign-in link so you can follow your request. No card needed.

Just want the app? Create an account or sign in.