Plans
Pricing
Priced so a CTO does not need approval. No contact-sales tier, because the answer to “what does it cost” should not be a meeting.
Starter
€59
per product, per month
At four products or more, Growth costs less. We would rather say that here than have you work it out after paying.
14 days, no card. It does not start until you upload an SBOM, and ends read-only, with nothing deleted.
Growth
€199
per month
14 days, no card. It does not start until you upload an SBOM, and ends read-only, with nothing deleted.
Partner
€499
per month
14 days, no card. It does not start until you upload an SBOM, and ends read-only, with nothing deleted.
| What you get | Starter | Growth | Partner |
|---|---|---|---|
| Active products | As many as you buy | 5 | 5 |
| Seats | 3 | 10 | 10 |
| Client workspaces | — | — | 10 |
| Billed | per product | per workspace | per workspace |
| SBOM inventory | Included | Included | Included |
| Exploitation watch | Included | Included | Included |
| Reporting workflow with the three clocks | Included | Included | Included |
| Evidence packs | Included | Included | Included |
| Disclosure page | Included | Included | Included |
| Public Trust Center per product | Included | Included | Included |
| Support period, release gate and component due diligence | Included | Included | Included |
| CI integration | Not included | Included | Included |
| Slack and Teams | Not included | Included | Included |
| Jira and signed webhooks | Not included | Included | Included |
| Post-quantum readiness view | Not included | Included | Included |
| API, CI release gate, AI assistant (MCP) and Dependency-Track | Not included | Included | Included |
| SBOM sharing, supplier attestation packs, customer notices and supplier SBOM requests | Not included | Included | Included |
| Market-surveillance request packs | Not included | Included | Included |
| White-label evidence packs and disclosure pages | Not included | Not included | Included |
| Partner console | Not included | Not included | Included |
Every plan, the trial included, runs the same three clocks and produces the same filings. The plans differ in how many products you cover, whether your pipeline and tools connect through the API, and what you publish and share.Art. 14(2)
One-time purchase
Readiness Pack
The reporting duty is the part that arrives first. The rest of the Regulation follows in December 2027, and the largest piece of it is documentation. The pack walks through the Article 13 duties and drafts five documents from your answers, plus the Annex II user information for each product, leaving every fact it does not hold as a visible placeholder rather than an invented one.
- The Article 13 readiness questionnaire, 28 questions across the manufacturer duties
- Vulnerability handling policy, coordinated disclosure policy and SBOM policy, drafted from your answers
- The Annex VII technical documentation outline and the Annex V declaration of conformity, with every unknown left as a visible placeholder
- Annex II information and instructions for users, drafted per product and exportable as PDF, JSON or CSV
- Regenerate at any time as the answers change; every version is kept
€1,490
once, per workspace, excluding VAT
Bought from inside the workspace, on any plan. Included in Partner. The questionnaire and the document outlines are readable before you buy.
The trial
Fourteen days, and it does not start until you upload an SBOM. You should not burn a week of it working out what to upload. One product during the trial. When the 14 days are up the workspace turns read-only until you choose a plan, and nothing is deleted. If you want to see the matching before you sign up, the SBOM check runs the same engine with no account.
Where your data lives
Hosted in the EU, in Frankfurt. Worth stating precisely: the infrastructure is in the EU, and our providers are US companies, so this is EU hosting rather than EU legal control. Anyone whose procurement asks the question deserves the accurate answer, and the security page gives the rest of it.
VAT
Prices exclude VAT. EU businesses with a valid VAT number are invoiced under reverse charge.
If you outgrow a plan
Downgrading pauses products over the limit rather than deleting them. Your inventory and case history stay intact, and an evidence pack stays verifiable after you leave.
Beyond reporting
Starter adds a public Trust Center for each product. Growth and Partner add the supply-chain work: SBOM share links, supplier attestation packs, supplier SBOM requests, contractual customer notices and market-surveillance request packs. The support period, the release gate in the app and component due diligence are on every plan. Every feature, with the plan that carries it.
If you report for other companies
The Partner plan is built for consultancies and MSPs: one console over up to ten client workspaces, with evidence packs and disclosure pages in your client’s name rather than ours. What the partner plan includes.