plans

Scans are free. Continuity is what a team pays for.

Every verdict, signature and evidence receipt stays free and open forever — that is the moat, and it is not for sale. What a team buys is the part that does not run in CI: hosted monitoring that re-observes your pinned capability surfaces and alerts you the moment one drifts, plus the shared policy and audit trail a security team needs.

Free
$0
forever, no account
  • Unlimited grades, passports and trust cards
  • toolproof-lock — lockfile + CI check (MIT)
  • Local evidence trail + browser verifier
  • check_tool MCP server for every employee
  • Watchlist with diff-on-change
start scanning →
Team
$49/mo
monitoring for 25 capability surfaces
  • Hosted monitoring — re-observes every 6h
  • Webhook alerts (Slack, PagerDuty, SIEM) on drift
  • Shared Lock policy across every repo
  • Hosted evidence export for auditors
  • Badge + gate enforcement across all repos
start monitoring →
start monitoring

We hand you a capability token, not an account. Pin a baseline with toolproof-lock lock, then POST the target and its fingerprint to start watching. No password to lose, no SSO to configure yet.

enterprise

Self-hosted scanner and signing keys, SSO/SAML and RBAC, SIEM streaming of signed verdicts, and vendor due-diligence reports on demand. Talk to us.

The free tier is the product, not a trial. Nothing on it stops working, and every receipt it produces is exactly as verifiable as a paying team's.