LLM-based code security review: costs, findings, and methodology | ISGroup
LLM-based code security review: costs, findings, and methodology
by Francesco Ongaro, 31/07/2026
We spent approximately $3,140 on API calls to conduct a security review of GlobaLeaks, a software platform that had already undergone six independent professional audits over the past thirteen years.
The review identified 29 vulnerabilities, 12 denial-of-service issues, and 42 hardening recommendations. The average cost was approximately $77 per confirmed finding, before human validation.
The total spend is one of the most relevant figures. Reviewing an entire codebase, line by line and against the main known classes of software weakness, has traditionally required weeks of work, specialised expertise, and substantial budgets. This type of analysis is now far more accessible.
The distribution of costs was also notable. The model with the most advanced reasoning capabilities accounted for 62% of the budget while processing only 7% of the tokens. Standard models handled most of the volume at a significantly lower cost.
Deep analysis remains more expensive than broad coverage, but the difference is no longer large enough to represent a significant barrier.
For organisations developing critical software, the implication is clear: systematically reviewing an entire codebase in depth is now within reach of many more people and organisations.
The full report, including the methodology and a breakdown of costs by model, is available here: What Can an Attacker Find With an LLM?
#CyberSecurity #ApplicationSecurity #LLM #SecureCodeReview #ISGroup
Request more information about this
Tags
Cyber Security
Share this article
Analyze this article with AI
ChatGPT
Claude
Perplexity
Grok
Request more information about this
Recent Posts
Visit the blog
Case Study: Strategic Cybersecurity Partnership between Rooters and ISGroup S.r.l.
11/12/2025
Case Study: Web Application Penetration Test on Pitagora and Tecnoradon by TECNORAD S.R.L.
11/12/2025
Case Study: Web Application Penetration Test on Workforce Management Platform, Vendor Management Platform and Marketplace for TimeFlow S.r.l.
26/11/2025
Popular Tags
Cyber Security
Certifications
Events
Agid Acn
Best Practice
Owasp
Thanks for contacting us!
We will contact you as soon as possible
Quotation Request
LLM-based code security review: costs, findings, and methodology
I would like to receive special offers and be informed about promotions or news (recommended)
I have read and accept the information pursuant to article 13 of the GDPR*
Contact us
We will contact you within 24 hours.<br>Your data is never shared with third parties.
An error occurred when sending your data, contact us at [email protected]
🎉 We want to talk to you! Book an appointment!