ScrutoraCode, cloud & consent

Priced per developer. Quoted per company.

We do not publish a price list, because the number depends on how many people commit, which modules you use and how many accounts you connect. What we can tell you now is how it is counted.

01 · How it is counted

Four things that are true whatever the number is.

NOT PER SCAN
Scan as often as you like
A tool you ration is a tool you stop using, and a compliance check that only runs before an audit has already failed. Nothing here is metered by scan, repository size, or lines of code.
NOT PER LOGIN
Readers do not cost anything
Billing follows active committers. Auditors, managers, reviewers and anyone who only reads findings can have an account for free, because charging for visibility works against the point of the product.
NOT A SMALLER ENGINE
Every plan runs the same analysis
The same 270+ rules across 12 languages and 26 frameworks run on a free scan and on an enterprise one. Plans change scale and export, never depth.
NOT A DEMO
The free tier is genuinely usable
One project, unlimited scans, findings with their code locations, and a report. Enough to decide whether any of this is true before speaking to anyone.
02 · Free, with no conversation

Two things cost nothing and need no account.

SCANNING IN CI

The container runs in your pipeline with no API key and no account. Findings return as SARIF. If all you ever want is a gate on pull requests, that is free and stays free.

A FIRST SCAN

Point it at a repository and read the output. You will know inside ten minutes whether there is anything here worth paying for.

03 · What moves the number

So the first call is short.

ACTIVE COMMITTERS

Roughly how many people push code in a month. Not headcount, and not seats.

MODULES

Code scanning on its own, or with cloud posture and consent. Each is separable.

SCALE

Number of applications, connected cloud accounts, and how much scanning you want running at once.

Bring those three numbers and we can quote on the first call rather than the third.

04 · Straight answers

The questions people actually ask.

Why is there no price list?

Because the honest answer depends on committers, modules and scale, and a list that ignores those is either wrong for you or padded to be safe. We would rather quote than hedge.

What counts as a developer?

An active committer in the billing period. People who only read findings do not count.

Does my source code leave my machine?

Only if you choose the hosted scan. The container runs on your own runner and returns results without uploading source.

What happens when I hit a limit?

The scan still runs. You are told what was skipped rather than quietly given a partial result.

Is there a discount for annual?

Yes. Ask on the call.