Pricing for CRA product security
Start free. Upgrade when you need private SBOMs, daily vulnerability scans and a Trust Center on your own domain.
Community
Ideal For
- OSS maintainers / hobby projects
- Test-drive sbomify
Features
- 1 Product
- 5 Components
- Unlimited SBOMs & compliance documents
- Public documents only
- Public trust center
- OSV vulnerability scanning (weekly re-scans)
- Manual exports only
- Basic compliance reporting
- Single user with community support
Business 14-day free trial
Ideal For
- Mid-size teams needing private SBOMs, compliance documents & integrations
Features
- 5 Products
- 200 Components
- Unlimited SBOMs & compliance documents
- Private documents with optional public sharing
- Custom trust center on your domain
- Transparency Exchange API (TEA)
- CRA Compliance Wizard
- Dependency Track integration
- Standard Integrations
- Automated reports & vulnerability insights (daily re-scans)
- Team/role-based access
- Priority email support
Enterprise
Ideal For
- Large orgs with advanced security & compliance needs
Features
- Unlimited Products
- Unlimited Components
- Unlimited SBOMs & compliance documents
- Custom trust center on your domain
- Enterprise-grade controls (RBAC, audits, etc.)
- Advanced & bespoke integrations, built for your toolchain
- Single-tenant installation
- Support packages for self-hosted installations
- Advanced dashboards & compliance modules
- Org-wide roles, SSO/SCIM
- Dedicated account manager & SLA-backed support
Frequently Asked Questions
What's included in the free tier?
The Community tier is perfect for open source projects and includes public SBOM hosting, 1 product with 5 components, and community support.
Can I upgrade or downgrade at any time?
Yes, you can change your plan at any time. Your billing will be prorated accordingly.
What payment methods do you accept?
We accept all major credit cards and can arrange alternative payment methods for enterprise customers.
Do you offer custom solutions?
Yes, our enterprise tier can be customized to meet your specific needs. Contact our sales team to learn more.
Can I self-host sbomify?
Yes! sbomify is open source and available for self-hosting. Check out our GitHub repository for installation instructions and documentation. Support packages for self-hosted installations, as well as single-tenant installations, are available on the Enterprise plan.