Free
To try it out
0 €forever
- 1 project
- Package and code analysis
- Made-up and malicious packages
- Vulnerability summary
Tools
- Technical PDF report
- OpenVEX export
- CycloneDX SBOM
- Key for your CI
Pricing
Indie
For solo builders
19 €per month, excl. VAT
- 5 projects
- GitHub connection, analysis on every change
- E-mail alerts
- Additional advanced AI analysis
Tools, on top of Free
- Website scannerwhat an attacker sees from the outside
- Access for your coding assistants (MCP)
Studio
For agencies and small teams
59 €per month, excl. VAT
- 15 client projects
- Up to 5 people
- Everything in Indie
Tools, on top of Indie
- Client report under your brandyour logo, your fix dates, compared with the previous month
- Sharing link for the client, no account needed
- NIS2 file for your clientsvulnerability register, policies, questionnaire answers
Publisher
For software and connected-device publishers
149 €per month, excl. VAT
- 10 products
- Up to 10 people
- Everything in Studio
Tools, on top of Studio
- VEX and CSAF 2.0 export
- CRA reporting deadlines and drafts
In the paid plans, AI is part of the analysis. It reviews the alerts in your code and dismisses the false ones, checks whether your code really calls the vulnerable part of a package, explains each vulnerability in plain language and translates the database descriptions. The free plan analyses with public databases and our rules, without sending your code to an AI model.
Compare the plans
Each plan includes everything in the previous one.
| Feature | Free0 € | Indie19 € excl. VAT | Studio59 € excl. VAT | Publisher149 € excl. VAT |
|---|---|---|---|---|
| Analysis | ||||
| Packages: OSV, EPSS, CISA KEV catalogue | included | included | included | included |
| Code: secret keys, Supabase RLS, common mistakes | included | included | included | included |
| Made-up and malicious packages | included | included | included | included |
| Daily check | included | included | included | included |
| GitHub repository analysed on every commit | not included | included | included | included |
| E-mail alerts | not included | included | included | included |
| AI in the analysis | ||||
| False code alerts dismissed | not included | included | included | included |
| Real use of the vulnerable part checkeddoes your code really call the affected function? | not included | included | included | included |
| Plain explanation of each vulnerability | not included | included | included | included |
| Vulnerability descriptions translated | not included | included | included | included |
| Tools | ||||
| Technical PDF report | included | included | included | included |
| OpenVEX export | included | included | included | included |
| CycloneDX SBOMthe list of packages of each version | included | included | included | included |
| Key for your CI (GitHub Actions) | included | included | included | included |
| Website scannerheaders, exposed files, keys visible in the browser | not included | included | included | included |
| Access for coding assistants (MCP) | not included | included | included | included |
| Client report under your brand, with a link | not included | not included | included | included |
| NIS2 file for your clientsvulnerability register with deadlines, policies, security.txt, questionnaires | not included | not included | included | included |
| CSAF 2.0 VEX export | not included | not included | not included | included |
| CRA reporting deadlines and drafts | not included | not included | not included | included |
| Team | ||||
| Projects | 1 | 5 | 15 | 10 |
| People | 1 | 1 | 5 | 10 |
Yearly, 2 months free: Indie 190 €, Studio 590 €, Publisher 1 490 € per year, excl. VAT. Paid plans open soon: reserve yours, no payment today. Pro and Partner (consultants, agencies, auditors) are priced on request.
Reserve a plan
Leave your e-mail: we will write to you once, when the chosen plan opens. Your promo code is saved with the reservation. No payment today.