Plans
Hobbyist, Professional, and Team: what each tier includes. Flat prices, no credits, no metering.
| Hobbyist | Professional | Team | |
|---|---|---|---|
| Monthly | Free | €9.90 / month | €79 / month |
| Annual | Free | €99 / year (€8.25 / month) | €790 / year (€65.83 / month) |
| Tracked sources | 1,000 | Unlimited | Unlimited |
| Lockfiles | 2 (up to 1,000 packages total) | Unlimited | Unlimited |
| AI release analysis & digests | ✓ | ✓ | ✓ |
| Security issues matched to your pins | ✓ | ✓ | ✓ |
| Seats | 1 | 1 | 5 (extra seats €14.90 / mo or €149 / yr each) |
| API tokens | ✓ | ✓ | ✓ |
| MCP server + agent skills (audit, upgrades, triage) | ✓ | ✓ | ✓ |
| Email digests | Weekly | Weekly, daily, monthly, real-time | Weekly, daily, monthly, real-time |
| Security alert bar (per account and per lockfile) | ✓ | ✓ | ✓ |
A plan's price is its full price in both senses. It includes VAT: the price you see is what you are charged, wherever you buy from, with nothing added at checkout. And there are no credits, meters, wallets, or usage-based charges. AI-powered analysis is included on every tier, subject to a fair-use policy that only matters at genuinely unusual volumes.
How to choose #
- Hobbyist covers one full repo completely: 2 lockfiles (a frontend and a backend lockfile) and a 1,000-source cap sized for both, plus the MCP server and agent skills, so Claude, Cursor, or any MCP client can audit that repo for security issues and resolve the safe upgrades for you, on the free tier.
- Professional removes the lockfile limit and the source cap: every project you work on, with every digest cadence (daily, monthly, and real-time on top of the free weekly) and priority support. The tier boundary is project count, not project size or capability. A paid plan buys control over when you're reached, never whether you're told. Security alerts are not a paid feature at any tier: they are sent immediately on the free plan too, and the severity bar that decides what interrupts you, plus the per-lockfile override of it, are included everywhere. Gating exposure notices behind a subscription is not a trade we want to make.
- Team is the org audit workspace: every seat sees the same sources, lockfiles, alerts, and security issues, and every seat's agent queries the same shared data over MCP. 5 seats included; extra seats are €14.90/month or €149/year each.
Upgrading and downgrading #
- Upgrade anytime from Settings → Subscription. The new tier is prorated to the current billing period.
- Downgrade also from the same page. The change takes effect at the end of the current paid period; you keep your current tier's features until then.
- Going Pro → Hobbyist (or Team → Hobbyist) preserves your data; sources beyond the 1,000-source cap stay in your account but stop polling until you free up slots or re-upgrade.
- If you track more lockfiles than the tier you're moving to allows, you pick
which ones to keep before the change takes effect, and the rest stop being
monitored. Each one is listed by its
repository, not just its
filename, so a portfolio where several repos each contribute a
package-lock.jsonis still a choice you can make deliberately.
Annual savings #
Annual billing works out to two months free on both paid tiers versus paying monthly, and is billed upfront for the year. Switching from monthly to annual mid-period charges the prorated annual rate and credits any unused monthly time.
See Fair use for the only limit on included AI analysis, and Refunds for the EU 14-day pro-rata refund policy.