Starter
Built for startups and SMBs that want continuous visibility into software risk.
i.e. €2,388 /year
Included
- Projects & components
- 5 projects
- 300 components
- 10 users
- Manual component entry
- Dependency file imports
- Git repository sync (GitHub, GitLab, Bitbucket)
- SBOM file import
- EOL / EOS & CVE
- End-of-support date tracking (open source and proprietary components)
- Daily CVE sync (NVD/NIST) with CVSS and EPSS scores, CISA KEV catalog
- EOL alerts at 12 months, 6 months and 30 days before end of support
- Alerts
- Configurable alert rules per project
- CVE by severity, CISA KEV catalog and EPSS threshold
- Events: CVE, end of life, new patch or new version, unrecognized component
- Channel: email
- Automatic ticket creation
- Frequencies: immediate, daily or weekly
- SBOM
- Unlimited SBOM generation
- SBOM in SPDX or CycloneDX format
- Reporting
- Project report (summary, 12-month trends, PDF export)
- Data
- Detailed information on components and vendors
- Retention: 1 year
- Workflow & Collaboration
- Owner assigned to each project and component
- Ticket assignment and tracking (status, comments)
- Comments on each component change
- Action history per component
- Security
- Data hosted in the European Union
- MFA (TOTP)
- Project roles (manager, contributor, reader)
- Organization roles (administrator, user, guest)
- Support
- Documentation
- Standard support (48 business hours)
- 14-day free trial (no card, no commitment)