Skip to main content

Pricing

Simple pricing.
Monthly or annual.

Both plans unlock the full Vulkro engine and every detector. The only difference is how long the license lasts and what you pay for it.

Pro Monthly

One payment. 30 days of Pro access.

$19one-time
  • One machine, single developer
  • All detectors, all output formats
  • CVE bundle updates included
  • Email support
Best value

Pro Annual

One payment. 365 days of Pro access.

$149one-time

Save $79 vs monthly

  • One machine, single developer
  • All detectors, all output formats
  • CVE bundle updates included
  • Email support

Free for personal and open-source use

If you're using Vulkro on your own projects or maintaining an open-source codebase, we issue free Pro licenses on request. Email a quick note about what you're working on and we'll send the license within a day.

Contact us →

Need something custom?

Teams of 5 or more, site licenses, air-gapped deployments, custom rule packs, vendor SBOM requirements, or anything else the standard plans don't cover. Send us a sentence about what you need and we'll come back with a quote.

Contact sales →

Pricing questions, answered

What does “one machine, single developer” mean?
Every Vulkro license is bound to one machine ID generated from your hardware. Run vulkro machine-id to see yours. Need it on more than one machine, including CI? See the custom plan below.
What happens when my license expires?
Vulkro keeps working. The CLI tells you the license lapsed and asks you to buy another one to keep getting CVE bundle updates and new detectors. No auto-renewal, no surprise charges. Buy a fresh one-time license whenever you're ready.
Do you offer refunds?
No. Once a license file is issued it cannot be revoked, so refunds are not offered as a matter of policy. If you're unhappy, reach out and we'll do what we can. See the refund policy for the full text.
Does Vulkro ever upload my source code?
Never. Vulkro runs entirely on your own machine. No cloud upload, no telemetry, no LLM API. See the privacy policy.