Pricing

Yes. The server, the dashboard and the Helm chart are AGPL-3.0, and one Helm command installs them in your cluster with a bundled Postgres and the scanner, already scanning. There is no licence key, no seat count and no feature behind a paywall in that edition: it is the dashboard for the one cluster it runs in, with local login or your OpenID Connect provider, alerts to a Slack webhook, and help in GitHub Discussions. You run the database, the upgrades and the backups.

Hosting, first: you install only the scanner, and we run the database, the vulnerability mirror, the upgrades and the backups. Then the things that only make sense with someone hosting it: every cluster in one dashboard across networks and accounts, critical and KEV alerts to email and Slack, longer history, and support. Both editions run the same images, so what you see on the cloud is what you would see self-hosted, plus those.

Pick Pro or Business, enter a card at checkout, and the plan is yours for 14 days with every feature. Nothing is charged until the trial ends; cancel before then from the Billing tab and nothing is charged at all. A trial started while a beta slot is open keeps the beta price when it converts. Self-hosting needs no trial, no account and no card.

For the cloud, yes: the trial asks for a card at checkout, so that the plan continues without a gap when the trial ends, and billing is handled by Stripe. Nothing is charged during the trial. Self-hosting needs no card and no account — one Helm command in your own cluster.

Yes. No contracts, no commitments. Cancel from the Billing tab in your dashboard. During the trial, cancelling means you are never charged. Later, your plan stays active until the end of the period you already paid for. After that the organization is read-only: the scanner’s uploads are refused and the dashboard stays readable until the data ages out of the plan’s history window. The self-hosted edition is there if you would rather run the whole thing yourself.

Nothing is taken away. Going over a limit — after a downgrade, for example — is warned, not enforced: existing clusters keep reporting, existing members keep their access, and the dashboard shows a warning on the Billing tab. What you can’t do while over the limits is add new clusters or team members, until you’re back under them or upgrade.

The history window covers trend charts and the activity feed, and how long the dependency list (SBOM) of an image you stopped running stays retrievable — 1 year on Pro, 2 years on Business, and 1 year self-hosted. It never limits the current picture: every plan shows every image currently running in your clusters, and a running image’s SBOM never expires.

StackRadar re-matches the stored SBOM of every running image whenever the advisory database changes. When that turns up a new critical or CISA-KEV finding on an image you are running — or CISA lists something already running — owners and admins get one email, and optionally one Slack message, within minutes, naming the advisory, the packages and the images. Both cloud plans include it, trial included; the self-hosted edition sends the same alert to a Slack webhook.

Until the slots are taken: 10 Pro and 5 Business subscriptions are sold at the beta price, and the pricing page shows how many are left. After those — or at the stable release, whichever comes first — new subscriptions pay the standard price, $99/month for Pro and $299/month for Business.

Nothing, as long as you stay subscribed. A subscription started at the beta price keeps it for as long as it remains active — through the stable release and after the slots are gone. It never goes up on you.

Yes. Annual billing is ten months' price — $590 a year for Pro and $1,990 for Business at the beta price — paid in advance. Switch between monthly and annual on the pricing page before you subscribe; an annual subscription started at the beta price keeps it like a monthly one does.