Open source
Free
Open source, forever.
- Check one repo, right now
- CLI, MCP server and GitHub Action
- All six local agents
- Core rules: GDPR, SOC 2, ISO 27001, EU AI Act
- Markdown and JSON reports
- Community support on GitHub
Free to check. Paid when your team needs proof.
The checker is open source and always free. The platform is for teams who need history, pull request checks and evidence for an auditor.
Platform
Coming soon
Lower pricing for startups in year one.
- Everything in open source
- Many repos in one view
- Readiness history over time
- Evidence log and audit-ready export
- Team logins, owners and due dates
- Pull request rules and email alerts
- Specialist packs: HIPAA, PCI DSS, DORA and more
Expert review
Talk to us
Add-on to the platform.
- A real auditor reviews your results
- Notes on findings and evidence
- Gap plan before your formal audit
- Help mapping controls outside code
Compare plans
| Open source | Platform | Expert review | |
|---|---|---|---|
| CLI, MCP server, GitHub Action | ✓ Included | ✓ Included | ✓ Included |
| Six agents, run locally | ✓ Included | ✓ Included | ✓ Included |
| Core rules: GDPR, SOC 2, ISO 27001, EU AI Act | ✓ Included | ✓ Included | ✓ Included |
| Many repos in one view | — Not included | ✓ Included | ✓ Included |
| Readiness history over time | — Not included | ✓ Included | ✓ Included |
| Evidence log and audit export | — Not included | ✓ Included | ✓ Included |
| Team logins, owners and due dates | — Not included | ✓ Included | ✓ Included |
| Pull request rules and email alerts | — Not included | ✓ Included | ✓ Included |
| Specialist rule packs (HIPAA, PCI DSS, DORA…) | — Not included | ✓ Included | ✓ Included |
| Review by a real auditor | — Not included | — Not included | ✓ Included |
Pricing questions
Is the open-source version limited?
No. It finds every issue the core rules cover, in one repo, whenever you run it. The platform adds what teams need: many repos, history, evidence for auditors, and specialist rule packs.
What does the platform cost?
We'll publish prices at launch. Startups get lower pricing in their first year. Request a demo to hear first.
Does the platform see my source code?
No. Checks still run on your machine or in your CI. Only results, like findings and evidence records, sync to your dashboard.