Free
$0/ mo
100 scans a monthScans of public GitHub repositories are not counted
- Included1 seat
- Included3 repositories
- IncludedEvery rule in the Managed Ruleset
- IncludedYour own YAML rules
- Not includedInvite teammates
Pricing
Start on Free and add seats as the team grows.
Pro
$17.50/ dev / mo
Unlimited scans5 developers: $1,050.00 a year
- IncludedAll Free features
- IncludedSeats for the whole team
- Included10 repositories per seat
- IncludedInvite teammates by email
- IncludedBilled once a year at $210 per developer, $30 less than monthly
Custom
Enterprise
Teams of more than 100 developersCustom terms
- IncludedAll Pro features
- IncludedProcurement and invoicing
- IncludedSecurity review
Scanning
| Feature | Free | Pro | Enterprise |
|---|---|---|---|
| Scans | 100 per month | Unlimited | Unlimited |
| Scans on public GitHub repositories | Not counted | Not counted | Not counted |
Engines
| Feature | Free | Pro | Enterprise |
|---|---|---|---|
| Code analysis (SAST)Follows untrusted input across your files. | JavaScript, TypeScript, Java, C# | JavaScript, TypeScript, Java, C# | JavaScript, TypeScript, Java, C# |
| Dependency analysis (SCA) | npm, Maven, NuGet | npm, Maven, NuGet | npm, Maven, NuGet |
| Checks whether your code reaches the vulnerable function | Included | Included | Included |
Rules
| Feature | Free | Pro | Enterprise |
|---|---|---|---|
| Managed RulesetEvery rule we maintain, for every language we support, on every scan. | Full | Full | Full |
| Your own YAML rules | Included | Included | Included |
Evidence and reporting
| Feature | Free | Pro | Enterprise |
|---|---|---|---|
| Entry point, dangerous call and the full path on every finding | Included | Included | Included |
| Findings page on the platformEvery finding with its trace, ready for team review. | Included | Included | Included |
| SARIF outputFor GitHub code scanning and other tools. | Included | Included | Included |
| GitHub pull request checks | Included | Included | Included |
| One sticky pull request comment | Included | Included | Included |
Workspace
| Feature | Free | Pro | Enterprise |
|---|---|---|---|
| Seats | 1 | Your whole team | Custom |
| Repositories | 3 | 10 per seat | Custom |
| Invite teammates by email | Not included | Included | Included |
Data
| Feature | Free | Pro | Enterprise |
|---|---|---|---|
| Where scans runThe platform never clones your repositories. | Your CI or your machine | Your CI or your machine | Your CI or your machine |
| Source lines in an uploadOff by default. Sent only if you pass the snippet option yourself. | Opt in | Opt in | Opt in |
Frequently asked questions
Do the 100 scans reset?
Yes. Free includes 100 scans per calendar month.
How do public repositories work?
Scans of public GitHub repositories are not counted.
Is there a free trial?
Free is the trial. Every plan runs the same engine and the same rules, so Free shows you exactly what Pro finds. Free has 1 seat, 3 repositories and 100 scans a month, and scans of public GitHub repositories are not counted. There is no card and no time limit.
What exactly is a seat?
A seat is one member of your workspace, and Pro is billed per seat. You can buy up to 100 seats yourself, and larger teams write to us from the contact page.
Does Atmos see my source code?
Scans run in your CI or on your machine, and the platform never clones your repositories. Source lines leave your machine only when you turn the snippet option on. The Privacy Policy lists everything a scan sends.
Who do I contact about Enterprise?
Enterprise is for teams with more than 100 developers. Write to us from the contact page with the size of the team, and we set up procurement and invoicing and a security review.
Subscriptions are governed by the Terms of Service, which covers cancellation and refunds. What a scan sends us is in the Privacy Policy.