Public preview first. Commercial plans when they are real.
Core supply-chain scanning is available in a capacity-limited preview. Paid plans, automated billing, and service commitments are not active yet.
Free while Rorix is in preview
No card and no automatic upgrade. Preview limits protect service capacity while billing and commercial terms are finalized.
Start preview- ✓NuGet and npm vulnerability and license scanning
- ✓CycloneDX and SPDX SBOM export
- ✓Dependency graph and upgrade guidance
- ✓Policy evaluation
- ✓One organization with up to three projects
- ✓Community support
Design-partner access
These capabilities are not self-serve paid plans yet. Enrollment is manual, capacity-limited, and confirmed only after readiness and data-processing review.
Team workspace
Additional organizations, private-repository automation, and expanded usage controls.
Pentesting
Verified-target application and API security testing with controlled execution limits.
Rorix Registry
Provenance-aware NuGet intake, policy review, and quarantined package workflows.
Code Analysis
DeepSec-assisted source review for a small, consent-based design-partner program.