Pricing
Free to try. Team and Enterprise, sized to your estate.
A free personal workspace to try provenance on your own devices and projects. Team and Enterprise are scoped against the estate you actually run. You know what the number covers before you sign.
Free
£0
a small personal workspace to try it
Limits
- 2 assets
- 2 products
- 40 releases
- 1 API key
- 2 members
- 10 evidence files
- 25 MiB evidence storage
Every day
- 5 SBOM ingests
- 20,000 components ingested
- 3 vulnerability scans
- 3 PDF exports
- 3 repository reads
- 2 invitations sent
Included
- The cryptographic inventory and quantum readiness
- hardware_bills_of_materials
- Nightly vulnerability rescans and repository sweeps: not on this plan
- Running pipelines on demand: not on this plan
- Security alert emails: not on this plan
- Publishing a signed trust statement: not on this plan
- Certificate expiry alerts: not on this plan
- hbom_screening: not on this plan
- Reading private repositories: not on this plan
Teamfor teams
Talk to sales
for a team running a real estate
Limits
- 2,000 assets
- 200 products
- 20,000 releases
- 25 API keys
- 100 members
- 5,000 evidence files
- 50 GiB evidence storage
Every day
- 1,000 SBOM ingests
- 5,000,000 components ingested
- 500 vulnerability scans
- 200 PDF exports
- 300 repository reads
- 100 invitations sent
Included
- Nightly vulnerability rescans and repository sweeps
- Running pipelines on demand
- Security alert emails
- Publishing a signed trust statement
- The cryptographic inventory and quantum readiness
- Certificate expiry alerts
- hardware_bills_of_materials
- hbom_screening
- Reading private repositories: not on this plan
Enterprise
Let’s talk
scoped to your estate, operated with you
Limits
- 100,000 assets
- 5,000 products
- 1,000,000 releases
- 250 API keys
- 2,000 members
- 100,000 evidence files
- 1.0 TiB evidence storage
Every day
- 10,000 SBOM ingests
- 50,000,000 components ingested
- 5,000 vulnerability scans
- 2,000 PDF exports
- 3,000 repository reads
- 1,000 invitations sent
Included
- Nightly vulnerability rescans and repository sweeps
- Running pipelines on demand
- Security alert emails
- Publishing a signed trust statement
- The cryptographic inventory and quantum readiness
- Certificate expiry alerts
- hardware_bills_of_materials
- hbom_screening
- Reading private repositories: not on this plan
Limits are what may exist at once. Members include pending invitations, and releases count over all time. Daily allowances reset at 00:00 UTC. Every plan runs the same build, with the hardware register, SBOM ingest, findings, VEX, licence policy, evidence packs, the audit trail and the API.
What to put in the first email to sales
Four lines will save a week. They are the four things we would ask on a call.
| Tell us | It decides |
|---|---|
| Device count | The size of the hardware register, and how we onboard the fleet you already have. |
| Products and releases a month | SBOM ingest volume, scan scheduling, and how quickly the audit history grows. |
| What you need to evidence | Which catalogue the evidence pack maps to: ISO 27001 Annex A, Cyber Essentials, the EU Cyber Resilience Act, or a customer's own due-diligence questionnaire. |
| Who operates it | The roles you need, and where approval for disposal and for suppressing a critical finding should sit. |
Questions about pricing
Does the free plan expire?
No. There is no card and no countdown. The free plan is a small personal workspace for trying the product on your own devices and projects. Its limits and daily allowances are listed on this page. A few features belong to the paid plans: nightly rescans, security alert emails, running pipelines on demand and publishing a signed trust statement.
Where is the line between personal and business use?
Personal means your own devices and your own projects. Once a colleague depends on the register, or it starts backing an audit your organisation is subject to, you need Team or Enterprise and should talk to us.
Why is there no price on the page?
The shape of the deployment decides the price: the size of your estate, your release cadence, how much history you keep and who runs it day to day. We scope against those and quote. A list price would be a guess that you would end up renegotiating.
What are the service commitments?
Support severities, maintenance windows and escalation paths are written into the agreement. We do not publish an availability figure yet, and the platform runs without redundancy today. When we have a real figure, it will appear here first. The free plan carries no commitments at all.
How do I get access?
Once your email address is verified, sign in with RODMENA ID and you get your own free workspace straight away, with no card and no waiting list. It is yours alone. New workspaces are occasionally paused for a short while, and the sign-in page says so when they are. To move to a larger plan, write to sales. Your Account & plan page shows your usage.
Can I get my data out?
Any time. SBOMs come back as CycloneDX, the estate as a single document, evidence packs as JSON, HTML or PDF, and the complete audit log through the API. Nothing is deleted underneath you. Retired and disposed items keep their history, because retirement and disposal are recorded states.
Ready when you are
Trying it needs no conversation. For anything your company depends on, tell us the shape of the estate and we will scope Team or Enterprise with you.