Pricing

The grader is free. You pay for the gate that blocks.

Grading text and code — web, API, MCP, CLI, Action — costs nothing. The Firewall blocks a private repo's merge on *{gates} classes* of flaws. You pay per repo — never per seat. A dormant repo costs $0.

Free
$0 forever
the whole grader · 1 blocking private repo (11 OSS classes)
  • Deterministic SlopScore + receipt — web, API, MCP, CLI, ActionCLI and GitHub Action grade locally: unlimited, never counted
  • 1 private repo blocking on the 11 open-source classesthe OSS Firewall client — cross-tenant leak #1, SQLi, SSRF, XXE, secrets, crypto, CORS… The 113 other classes (closed-source pro packs) stay advisory here → blocking once paid. The hook: the real gate on a real private repo, free.
  • Advisory on all your other private repos (the 124 classes)
  • Free blocking gate on your public repos (11 OSS classes)open source does not pay — proven by OIDC visibility
Start — no card
Per-repomost taken
from
$24 / repo / month
yearly: 2 months free · unlimited devs · 14-day trial, no card
124 blocking gates · every finding, file:line
1–4 repos$24 / repo / month
5–10 repos$15 / repo / month
11–20 repos$11 / repo / month
  • Blocks a private repo's merge on 124 classescross-tenant leak #1, SQLi/SSRF/XXE/deserialization, secrets, supply-chain, containers, IaC…
  • The price per repo drops with volume — one slot = one repo
  • Unlimited users — we bill the repo, never the seat15 devs on 2 repos = 2 slots, not 15 seats
  • Zero source egress — structural fingerprint, OIDC, no secret

Increase = immediate proration · decrease = next cycle · beyond 20 repos → Team

Protect a repo →
Teamunlimited
$299 / month
yearly: $2990/yr (2 months free)
UNLIMITED repos · unlimited users
  • All your private repos blocked — no countingfrom ~20 repos, the flat costs less than per-repo
  • The 124 blocking classes, every finding
  • Unlimited users · one predictable price
  • vs per-seat: 30 devs cost $750–1,050/mo elsewhereSnyk 750 · GHAS 900 · Semgrep 1,050 — Team: $299

Switch per-repo ↔ Team anytime · prorated

Get Team →
Enterprise
Negotiated
annual contract · contact us
all of Team +
  • SSO-SAML + provisioning
  • Self-hosted extractor — data never leaves
  • Custom detector packs · SLA · no-retention
  • Compliance (SOC2, security review, DPA)

For large accounts / regulated sectors

Talk to the team →

You pay per repo, not per head — a dormant repo costs $0. Scoring is deterministic and costs nothing; only the Firewall (124 blocking classes, an engine that keeps growing server-side) is paid. Beyond Team: Enterprise, negotiated.

detect The gate reads every PR

Every PR is graded + scanned against 124 classes — cross-tenant leak, injection, secrets, supply-chain, IaC. Structural fingerprint: no source leaves the runner, OIDC with no secret. The classification brain stays server-side (the moat).

adapt It blocks or it advises

A paid private repo: the merge is blocked on the 124 classes. A public repo or the 1 free private repo: blocked on the 11 open-source classes (OSS client), the 113 closed-source pro packs stay advisory. That is what you pay for: the full gate, not the OSS subset.

verify Reproducible, contractable

Same code + same formula = same verdict + same hash. Every finding carries its file:line and its rule. A verdict is not an AI opinion — it is a deterministic oracle you can put in a contract.

How the Firewall sees — 5 analysis layers, 124 gates →