Settings and Billing

​

Settings Tabs

​

Profile

Use Settings → Profile to update personal account and security settings.

​

Team

Use Settings → Team to manage members and organization access.

​

Billing

Use Settings → Billing to view credits and target balances, manage your subscription and payment method, purchase additional credits or target capacity, and review invoices. Admin access is required. Enterprise plans include custom assessment credit pricing, SSO/SAML, priority assessments, and dedicated support. Billing is also accessible directly from the sidebar for quick access.

​

Notifications

Use Settings → Notifications to control delivery preferences.

​

WAF Configuration

Use Settings → WAF Configuration to copy current allowlist IPs.

​

Integrations

Use Settings → Integrations to connect or disconnect supported tools. Connected integrations enable additional actions throughout the platform, such as creating linked issues from findings, requesting patches, or launching Agents from Slack. An upgraded plan and permission to manage integrations are required to connect integrations. See Integrations for details.

​

Features

Settings > Features shows the organization’s automatic retest settings. These settings control validation after finding resolution or patch merges; see Retesting for how their results affect finding status. Owners, admins, and members with permission to manage integrations can change these settings.

​

Status

Use Settings → Status for current platform health.

​

API Keys

Use Settings → API Keys to create and manage keys for API usage. This requires permission to manage API keys. API keys are organization-scoped. Rotate keys regularly and remove keys that are no longer used by CI/CD systems or approved tools. If Billing or API Keys shows an access-denied message, use the Settings tabs to return to a page you can access. Ask an organization owner or admin for the required access.

​

Setup Checklist for Admins

1. Confirm billing and plan state.
2. Invite required team members.
3. Configure integrations.
4. Configure notification preferences.
5. Share WAF allowlist with infrastructure owners.
6. Create API keys only for the systems that need them.

​

Plans

Starter is for teams deploying security agents continuously, and your first assessment is complimentary. It includes:

• Reporting
• Integrations
• Auto patching
• Auto retesting
• PR Security Reviewer
• Security task agents
• Additional usage-based billing and discounted credit packs

Scale is for teams testing a larger attack surface, with up to five assessments running at once. It includes everything in Starter, plus:

• Premium support
• Mobile targets
• Infrastructure assets
• Validator

Enterprise includes everything in Scale, with unlimited agents, dedicated infrastructure, and enterprise controls sized to your program. The Scale plan may appear as Pro in Settings → Billing. See mindfort.ai/pricing for current pricing.

​

Credits and usage-based billing

The assessment form displays the cost before you start: Balanced uses 200 credits, Deep uses 400, and Ultra uses 800. Task agents, finding retests, patches, and validations each use one credit. Starter and Scale customers can purchase additional credits and enable usage-based billing. When enabled, assessments can continue after prepaid credits are exhausted; usage beyond the prepaid balance is billed. Review the displayed rates and billing period before enabling it. Included plan credits may reset each billing period. Check Billing for your current balance, subscription, usage, and invoices.

​

Feature access

Agents, retesting, reporting, and connecting integrations require an upgraded plan. Organization features can impose additional access requirements; for example, Security Reviewer appears only when enabled for your organization. Scheduled assessments are available on all plans, subject to the target’s readiness and available credits.

​

Auditor access

Members whose only role is auditor have read-only access to permitted security views, including Overview, Assessments, Findings, Target Inventory, and Coverage. They cannot start runs or change findings. Filesystem, Agents, Analytics, and administrative actions are not available to members with only the auditor role.