Skip to main content

Pricing

The full product. On every plan.

Start with a 14-day trial of the full product. Cancel any time before it ends.

  • Vulkro Pro

    Best for Teams that write their own applications.Scans code in JavaScript, TypeScript, Python, Go, Java, PHP, C and C++Finds the flaws an attacker can reach, with the attack path to eachAlso checks dependencies, secrets and container images

    $20/ month

    or $204 billed yearly

    Start a 14-day trial

    $0 today. No charge for 14 days. Cancel any time.

    Includes:

    • Every check for JavaScript, TypeScript, Python, Go, Java, PHP, C and C++
    • The evidence behind every finding: severity, how sure we are, and the attack path that leads to it
    • Attack paths: every way in, to every sensitive operation, across the whole application
    • Change review: only what you changed, with new findings separated from old ones
    • Release gate and pull-request comments from your own pipeline
    • Cloud scans in your portal, 1 a month, with paid upgrades
    See all features
  • Vulkro for Salesforce Pro

    Best for Salesforce admins, developers and AgentExchange publishers.Scans Apex, LWC, Aura, Visualforce, Flows and metadataAudits the live org: sharing, guest users, permissions, MFA and sessionsPrepares the AgentExchange Security Review report

    $30/ month

    or $300 billed yearly

    Start a 14-day trial

    $0 today. No charge for 14 days. Cancel any time.

    Includes:

    • Every check for Apex, LWC, Aura, Visualforce, Flows and metadata
    • Live-org audit: permissions, sessions, MFA, sharing, installed packages and trust settings, read from your org
    • Guest exposure: what an anonymous visitor can reach in your org
    • AgentExchange Security Review report, ready to hand to the review team
    • The evidence behind every finding: severity, how sure we are, and the attack path that leads to it
    • Cloud scans in your portal, 1 a month, with paid upgrades
    See all features
  • Best value

    Core and Salesforce

    Best for Companies that build their own apps and also run Salesforce.Everything in Core and everything in SalesforceYour application code and your Salesforce orgs, with the same evidence for every findingCosts less than the two bought apart

    $40/ month

    or $396 billed yearly

    Start a 14-day trial

    $0 today. No charge for 14 days. Cancel any time.

    Save $10 a month against buying both apart

    Both Pro products, on one subscription:

    • Everything in Vulkro Pro
    • Everything in Vulkro for Salesforce Pro
    • Cloud scans in your portal, 1 a month, with paid upgrades
    • One 14-day trial for both
    See all features
  • Runs offline: your code stays on your machine
  • Secure checkout by Stripe
  • Cancel in two clicks from your portal

The command line, the VS Code extension and the local console, for your application code and for Salesforce. Every plan starts with a 14-day trial: add a card at checkout and nothing is charged until day 15. Pro then renews monthly or yearly until you cancel, from the Billing page in your portal. Every finding shows why it was raised, on every plan, with no add-on to unlock.

Cloud scans on Pro

Every Pro plan includes Cloud scans in your portal. Add more when you need them; the upgrades also turn on scheduled scans.

  • Included

    Included

    Cloud scans
    1 a month
    Scheduled scans
    None

    Core Pro with it$20 a month

  • Daily

    +$10 a month

    Cloud scans
    1 a day
    Scheduled scans
    Daily

    Core Pro with it$30 a month

  • Frequent

    +$39 a month

    Cloud scans
    up to 10 a day
    Scheduled scans
    Every 6 hours

    Core Pro with it$59 a month

  • Continuous

    +$99 a month

    Cloud scans
    more than 10 a day (fair use 30)
    Scheduled scans
    Every 6 hours

    Core Pro with it$119 a month

  • Run in your portal, for one person: no team features
  • 1 Salesforce production org and 1 sandbox, 3 repositories with 1 branch each
  • Scans and their results are deleted after 14 days
  • Every scan counts, whether you start it or a schedule does. Failed and cancelled scans do not count
  • The 14-day trial is on Pro itself. Buying a scan upgrade during the trial ends it and starts the paid period
  • Runs offlineYour code stays on your machine.
  • Scans use no AIThe same code gets the same answer.
  • One subscription, one personA whole team? Vulkro Cloud gives your company one workspace, and every member gets Pro on their own machine.

Compare plans

The Pro plans, side by side. The table opens on what differs between plans.

10 of 19 rows

Pro plans compared
FeatureVulkro Pro$20 / monthVulkro for Salesforce Pro$30 / monthCore and Salesforce$40 / month
What each plan adds
Application code: JavaScript, TypeScript, Python, Go, Java, PHP, C and C++IncludedNot includedIncluded
Salesforce: Apex, LWC, Aura, Visualforce, Flows and metadataNot includedIncludedIncluded
Attack paths, impact, data-flow and structure mapsIncludedNot includedIncluded
Change review, history, trends, compareIncludedNot includedIncluded
Release gate and pull-request comments from your pipelineIncludedNot includedIncluded
SBOM, VEX, compliance evidence, executive reportIncludedNot includedIncluded
Container scanningIncludedNot includedIncluded
Live-org audit and guest exposureNot includedIncludedIncluded
AgentExchange Security Review report and pre-submission gateNot includedIncludedIncluded
Blast radius, org maps, Well-Architected reviewNot includedIncludedIncluded

Questions

Billing, trials, members and what happens when a plan ends.

Ask us something else
Is my card charged when I start the trial?
No. Checkout shows $0 due today. The first charge is on day 15, and only if you have not cancelled; you can cancel in two clicks from the Billing page in your portal. Payments are handled by Stripe, and Vulkro never sees your card number.
How does the trial work?
Every Pro plan starts with a 14-day trial of the full product. You add a card at checkout and nothing is charged during the trial. Then install the scanner and sign in on your machine. On day 15 the trial becomes paid Pro unless you cancel first, from the Billing page in your portal. There is one trial per email address and per machine.
Can I use Vulkro without a subscription?
Only during the trial. Vulkro is a paid tool, and the way to try it is a 14-day trial of the full product, started at checkout in your portal. Without an active trial or subscription the scanners do not scan: they stop with exit code 1 and say how to start the trial.
What do Cloud scans on Pro include?
Pro includes Cloud scans in your portal, 1 a month, in the Vulkro Cloud app for one person, with no team features. You can connect 1 Salesforce production org and 1 sandbox, 3 repositories with 1 branch each. Scans and their results are deleted after 14 days. For more scans, add Daily ($10 a month, 1 a day), Frequent ($39, up to 10 a day) or Continuous ($99, more than 10 a day, fair use 30). The upgrades add scheduled scans. The 14-day trial is on Pro itself; buying an upgrade during the trial ends it and starts the paid period.
Do subscriptions renew automatically?
Yes. Monthly and annual plans renew until you cancel, and you can cancel at any time from the Billing page in your portal. Your plan stays active until the end of the period you paid for.
What happens when a trial or a subscription ends?
Scanning keeps working for a 14-day grace period, then it stops until you subscribe again. Nothing is deleted from your machine: your results and reports stay there and stay readable. Cloud scans stop and your Cloud results stay readable for 30 days, then they are deleted.
13 more questions
How do I run Vulkro in CI?
Create a CI key in your portal and set it as VULKRO_ACCOUNT_TOKEN in your pipeline. A CI key works during the trial and on paid plans, uses no seat, and can be revoked at any time. Air-gapped pipelines use a licence file instead, in VULKRO_LICENSE_B64.
What counts as a Cloud scan?
Every scan counts, however it starts: by hand, on a schedule or when you first connect an org or a repository. Failed and cancelled scans do not count. The day resets at 00:00 UTC and unused scans do not roll over. At the limit a scan is refused with a link to the next level, and scheduled scans over the limit are skipped and reported, never queued.
Is there a Vulkro Cloud trial?
Yes. Every Starter and Business plan starts with a 14-day trial. Tell us the plan and what you want to connect on the set-up page, and we set up your workspace within two business days. Enterprise starts with a conversation.
Who counts as a member in Vulkro Cloud?
Every member of a workspace is a paid seat: admins, analysts and developers. Starter includes 3 members (up to 20) and Business 10 (up to 100); each extra member is a monthly fee. Every member also gets Pro on their own machine for the workspace’s products. People who only need to read results get scheduled report emails instead of a seat.
How is a Vulkro Cloud plan sized?
By what it protects. For Salesforce, the internal user licences in your connected production orgs (Starter up to 500, Business up to 5,000). For code, the people who committed to your connected repositories in the last 90 days (Starter up to 15, Business up to 100). Above that, talk to us about Enterprise.
Can I pay annually?
Yes. A year costs about the same as ten months. Choose monthly or annual at checkout, or change it later from the Billing page in your portal. On Vulkro Cloud, extra members are a monthly fee: on an annual plan they are billed for twelve months, with no annual discount.
Can I change plans?
Yes, from the Billing page in your portal. An upgrade starts at once. A downgrade takes effect at the end of the period you paid for.
Do individual licences work for a team?
Each Pro subscription belongs to one person, on one machine per product. For a team, Vulkro Cloud gives your company one shared workspace for code and Salesforce, and every member gets Pro on their own machine.
Do you work with agencies and consultancies?
Yes. Agencies and consultancies run one workspace per client, each on the plan that fits it. Your staff are members in each client’s workspace.
Is Vulkro Cloud real-time monitoring?
No. Vulkro Cloud is scan-based. It connects to your Salesforce orgs read-only and scans them, and your code repositories, on a schedule (daily on Starter, every 6 hours on Business, hourly on Enterprise) and whenever someone starts a scan. It keeps every result for the plan’s history, shows what changed since the last scan, and never changes an org.
Can we use Vulkro in an air-gapped environment?
Yes. The scanners run with no network at all, and vulnerability data arrives as a checksummed bundle. Pro subscribers can create a signed offline licence file in the portal. To run Vulkro Cloud on your own servers, talk to us about Enterprise.
Which currencies and payment methods do you accept?
Prices are in US dollars and exclude tax. Pay by card at checkout in your portal. Enterprise customers can pay by invoice and purchase order.
Do you offer discounts for nonprofits or open-source maintainers?
Open-source maintainers can request a complimentary licence. Nonprofits, talk to us.

Try the full product for 14 days.