Skip to content

Plans & Billing

How plans work

Pricing is based on how many repositories you actively scan, not lines of code or seats — repository count is the metric that best tracks actual cost (AI spend scales with security-sensitive files touched and scan frequency, not raw codebase size), and it's the same unit you're already thinking in when connecting repositories.

Each plan also has a scan-volume guard-rail: a soft cap on how many scans a single repository can run in a rolling 30-day period, protecting against an unusually high-churn repository consuming disproportionate resources. Hitting either limit never silently skips a scan — you get a real, visible failed scan explaining why, since a security tool silently not scanning something is a trust problem, not an ordinary quota message.

Current usage against both limits is always visible on Settings → General, alongside a running total of AI cost for the last 30 days — shown as two separate figures once you bring your own Anthropic key: platform cost (billed as part of your plan) and BYOK cost (billed directly to your own Anthropic account, informational only).

Tiers

PlanRepositoriesScans / repo / 30 days
Free130
Starter560
Team20200
CustomUnlimitedUnlimited

Starter and Team are self-serve. Custom is a negotiated arrangement for teams outgrowing Team's limits — not available through the self-serve checkout below.

Upgrading

Settings → General → Upgrade to Starter / Upgrade to Team opens a Stripe-hosted checkout page — card details are handled entirely by Stripe and never touch this application's servers. Once payment completes, the plan updates automatically within a few seconds.

Managing your subscription

Once subscribed, a Manage billing button opens Stripe's own customer portal — update your payment method, switch tiers, view invoices, or cancel, all without needing a separate flow built into this app.

If a payment fails, the subscription status (e.g. past_due) shows directly next to your plan on the Settings page, so a billing problem is never a silent surprise.

AI-assisted vulnerability scanning.