Pricing
Transparent pricing. No surprises.
Free forever with 3 scanners — run npx -y safeweave-mcp. First 10 scans need no signup; unlimited scans with a free account.
Free
First 10 scans need no signup. Unlimited scans with a free account.
- ✓Instant trial (10 scans, no signup)
- ✓SAST (top 20 curated rules)
- —SAST (the full upstream rule registry)
- ✓Secrets (Gitleaks default ruleset, no custom rules)
- ✓Dependency scanning
- —All 8 scanners
- —Compliance profiles (7 frameworks)
- ✓Runs locally via npx
- —Dashboard & reporting
- —Hosted scanning
- —Connected repositories
- —No-code integrations
- —Team management
- —SSO
- —Custom profiles
Self-Hosted Pro
Most PopularRuns on your infrastructure. License + updates included.
- —Instant trial (10 scans, no signup)
- —SAST (top 20 curated rules)
- ✓SAST (the full upstream rule registry)
- ✓Secrets (Gitleaks default ruleset, no custom rules)
- ✓Dependency scanning
- ✓All 8 scanners
- ✓Compliance profiles (7 frameworks)
- ✓Runs locally via npx
- ✓Dashboard & reporting
- —Hosted scanning
- —Connected repositories
- —No-code integrations
- —Team management
- —SSO
- —Custom profiles
Cloud
- —Instant trial (10 scans, no signup)
- —SAST (top 20 curated rules)
- ✓SAST (the full upstream rule registry)
- ✓Secrets (Gitleaks default ruleset, no custom rules)
- ✓Dependency scanning
- ✓All 8 scanners
- ✓Compliance profiles (7 frameworks)
- —Runs locally via npx
- ✓Dashboard & reporting
- ✓Hosted scanning
- 10Connected repositories
- —No-code integrations
- —Team management
- —SSO
- —Custom profiles
Cloud Plus
- —Instant trial (10 scans, no signup)
- —SAST (top 20 curated rules)
- ✓SAST (the full upstream rule registry)
- ✓Secrets (Gitleaks default ruleset, no custom rules)
- ✓Dependency scanning
- ✓All 8 scanners
- ✓Compliance profiles (7 frameworks)
- ✓Runs locally via npx
- ✓Dashboard & reporting
- ✓Hosted scanning
- 25Connected repositories
- ✓No-code integrations
- —Team management
- —SSO
- —Custom profiles
Team
Up to 25 seats · Unlimited repos
- —Instant trial (10 scans, no signup)
- —SAST (top 20 curated rules)
- ✓SAST (the full upstream rule registry)
- ✓Secrets (Gitleaks default ruleset, no custom rules)
- ✓Dependency scanning
- ✓All 8 scanners
- ✓Compliance profiles (7 frameworks)
- ✓Runs locally via npx
- ✓Dashboard & reporting
- ✓Hosted scanning
- UnlimitedConnected repositories
- ✓No-code integrations
- ✓Team management
- ✓SSO
- ✓Custom profiles
Invite your team — get 1 month free
FAQ
Frequently asked questions
Do I need to sign up before my first scan?
No. Run npx -y safeweave-mcp, point your AI editor at it, and you get 10 free scans with no account. After that, register for free (still no card) for unlimited scans on the free scanners — SAST, secrets, and dependencies.
Does SafeWeave transmit my source code?
On Free and Self-Hosted Pro, the scanners run locally on your machine, so your source code stays local — the only network calls are downloading the scanner binaries and a license check. The Cloud plan is different and opt-in: when you connect a repo, file contents are sent over HTTPS to api.safeweave.dev to be scanned (secret-bearing files like .env are withheld). Self-Hosted Pro’s dashboard syncs only findings metadata, never source.
How is this different from Snyk, Semgrep, or GitHub?
All of them are good, and Snyk (Snyk Studio) and Semgrep (Guardian) both have official Cursor/Claude Code MCP now, so “MCP-native” isn’t unique. SafeWeave’s angle is simpler adoption for a small team: a flat $15/mo for all 8 scanners (no per-seat math), scanners that run locally on Free and Pro, and a first scan over npx before you ever create an account.
Is there a CI gate?
Two ways. Free / Self-Hosted Pro: run `npx -y safeweave-mcp scan . --format sarif --fail-on high` in any CI (or use the SafeWeave GitHub Action) — it exits non-zero on findings, so the check fails, and it can upload SARIF to GitHub code scanning. Cloud plan: connect a GitHub repo and every push and pull request gets a managed scan that posts a GitHub Check Run with inline annotations on the exact file and line.
Does it need internet access?
On Free and Self-Hosted Pro, scanning is local — internet is needed only to download scanner binaries on first run and to verify your license. On Cloud, file contents are sent to api.safeweave.dev to be scanned.
What do I get free vs paid?
Free: SAST, secrets, and dependency scanning, running locally. Self-Hosted Pro ($15/mo) unlocks all 8 scanners (adds IaC, container, DAST, license, posture) and compliance profiles while keeping scanning local. Cloud ($20) and Cloud Plus ($29) add hosted scans, a dashboard, history, and GitHub checks; Team ($99/mo, 25 seats) adds org management.