Provider Modes
Choose how AI runs for your workspace, from Vulnsy's managed AI to your own OpenRouter API key or a self-hosted model endpoint, and see managed pricing and allowances.
Every workspace runs AI in one of three modes. Enabling AI is free and open to everyone. Only Vulnsy's managed AI is a paid add-on, and it is included free during your trial.
Configure the mode under Admin, then Organization Settings, then the AI tab.
Managed (Vulnsy AI)
Vulnsy runs the AI for you, so there is nothing to set up beyond turning it on. Managed AI is a paid add-on, sized to your plan, with a monthly allowance of AI generations that is pooled and shared across your whole team.
| Plan | Monthly allowance | Add-on price |
|---|---|---|
| Solo | ~200 generations | £10 / month |
| Team | ~1,000 generations | £39 / month |
| Business | ~3,000 generations | £99 / month |
A generation is one AI action, such as drafting a finding or rewriting a paragraph. The allowance is shared, so any member of your team draws from the same monthly pool. It resets at the start of each month.
Managed AI is included free during your trial so you can evaluate it before subscribing. After the trial, add it from the subscribe or change-plan screen.
Bring Your Own Key
Connect your own OpenRouter API key and use AI with no usage charge from Vulnsy. You pay OpenRouter directly for what you use, and there is no monthly allowance from us to run out of.
To set it up:
- Create a key at openrouter.ai/keys.
- In the AI tab, choose Bring your own key and paste it in.
- Optionally set a preferred model.
Your key is stored encrypted and is never shown again after you save it. You can replace it at any time.
Bring Your Own Endpoint
Point Vulnsy at your own OpenAI-compatible model endpoint, for example a self-hosted model exposed over HTTPS. This keeps generation entirely on infrastructure you control, with no usage charge from Vulnsy.
To set it up:
- In the AI tab, choose Bring your own endpoint.
- Enter the endpoint URL and, if required, an access token.
- Optionally set the model name your endpoint expects.
Custom endpoints are validated to block requests to private and internal network addresses. Your endpoint must be reachable over HTTPS. Any access token you provide is stored encrypted and sent as a bearer token.
Which Mode Should I Choose?
| If you want | Choose |
|---|---|
| The simplest option with nothing to manage | Managed (Vulnsy AI) |
| To use your own AI account and billing | Bring your own key |
| To keep AI on your own infrastructure | Bring your own endpoint |
Next Steps
- Writing Assistant to start using AI in the editor.
- Privacy & Limits for data handling and usage limits.