Pricing
Start with a 7-day free trial — every feature unlocked, no credit card. Then keep the base app for a one-time $5, and add only the packs you need.
Base App
RequiredRequired foundation. Yours forever.
- Dependency scanning, all 11 ecosystems
- Vulnerability checking (OSV)
- Registry detection
CLI Add-on
OptionalTerminal + CI/CD. Stacks with any pack, or standalone.
pkgprobe scan / sbom / fix- CI/CD via
PKGPROBE_LICENSE_KEY - Stacks with any pack
Feature packs
Compliance Pack
Audit-ready evidence for SOC 2, ISO 27001, FedRAMP.
- SBOM export — CycloneDX 1.6 / SPDX 2.3
- VEX generation — OpenVEX / CycloneDX / CSAF
- Policy enforcement rules
- License compliance + conflict reporting
- Registry enforcement
Developer Pack
Everyday workflow tools for shipping safely.
- Dependency graph visualization
- Recurring scheduled scans
- 1-click CVE fixing + risk scoring
- Typosquatting detection
Power Pack
Everything in Compliance and Developer. Best value.
- All Compliance Pack features
- All Developer Pack features
Packs are subscriptions. Annual billing saves ~17% (two months free). Cancel anytime.
What's in each pack
| Capability | Base | Compliance | Developer | Power |
|---|---|---|---|---|
| Dependency scanning (11 ecosystems) | ✓ | ✓ | ✓ | ✓ |
| Vulnerability checking (OSV) | ✓ | ✓ | ✓ | ✓ |
| Registry detection | ✓ | ✓ | ✓ | ✓ |
| SBOM export (CycloneDX / SPDX) | — | ✓ | — | ✓ |
| VEX generation | — | ✓ | — | ✓ |
| Policy enforcement | — | ✓ | — | ✓ |
| License compliance | — | ✓ | — | ✓ |
| Registry enforcement | — | ✓ | — | ✓ |
| Dependency graph | — | — | ✓ | ✓ |
| Scheduled scanning | — | — | ✓ | ✓ |
| 1-click CVE fixing | — | — | ✓ | ✓ |
| Typosquatting detection | — | — | ✓ | ✓ |
The CLI add-on ($1 one-time) unlocks the terminal + CI/CD and stacks with any column.
Per-seat licensing for teams
Per-seat Core with machine activation, optional Compliance and Developer packs, a support SLA, and annual invoicing / PO. Fleet dashboard, SSO/SCIM, and admin policy override for org-wide enforcement.
- Per-seat CLI + scanning, machine activation
- Admin policy override users can't disable
- Fleet posture dashboard + SSO / SCIM