Preflight vs HeimWall

A side-by-side comparison built from both listings. Blank cells mean the company has not given that detail; we never guess.

Preflight compared with HeimWall
Detail	Preflight	HeimWall
What it does	Security scan for Supabase apps built with AI tools	Security monitoring for AI coding tools that detects secrets and PII before they're sent
Stage	Not given	Startup
Founded	Not given	Not given
Based in	CR	Not given
Pricing model	Not given	Not given
Pricing	Free scan included with every app. Proof Report $29 one-time for Supabase apps. Monitor $12/mo (founding price until November 20, 2026, then $19/mo) for weekly outside checks on up to 3 apps. Launch Pack $79 one-time for Proof Reports on up to 3 apps with 90 days of re-scans.	Free individual app, forever. Team plans start at 10 seats with annual contracts; pricing quoted in writing per deployment. Enterprise plans available for large fleets.
Key features	Read-only security scan checking for exposed tables, API keys, and files Two-user cross-account access testing as signed-in users Automated privilege escalation testing Dated evidence report for customers and compliance Rerunnable curl requests for each finding Weekly monitoring of outside security checks Support for apps without Supabase No service role key required Test data marked and removed automatically 14-day refund guarantee	Real-time warning as you type Supports Cursor, Claude Desktop, VS Code with Copilot, ChatGPT Desktop, and Windsurf Deterministic detection with no AI model Local detection with no network call Manager dashboard with category, severity, tool, and engineer information End-to-end encryption with manager-held keypair Per-organization hash chain audit trail macOS 13+ on Apple Silicon
What makes it different	Tests live apps as two real users, not just configuration linting Built-in checks mostly read setup; Preflight signs in as two users and tries to read across them No code upload or service role key needed Automated checks with human-readable fix prompts and SQL	Secrets are masked on the device before any record is created, so live secrets never reach company servers Deterministic regex rules instead of AI models, making detection explainable and consistent offline Contractual guarantee that detection data cannot be used for performance reviews
Free plan	Not given	Not given
Open source	Not given	Not given
Platforms	Not given	Not given
Public API	Not given	Not given
Community votes	0	0
DR (Domain Rating by Ahrefs)	Not checked yet no change since last check	5 +3 (up) since last check
Trust Flow (Majestic)	0	3
Citation Flow (Majestic)	0	24
Referring domains (Majestic)	0	70

4 details filled in for both companies.

More alternatives to Preflight More alternatives to HeimWall