Skip to main content

Pricing

A 30-day free trial, then $499 per month or $4,990 per year per GitHub owner. The basic commands stay free.

Pre-launch. The CLI is not yet published, and trials and purchases are not yet open to customers. The buy buttons below are placeholders and do nothing yet. This page describes the planned launch offer.

Free

$0 no time limit

The basic commands need no license, key, sign-up or network call:

  • init, scan and gate, for any number of systems
  • readiness checklist
  • request-approval and default-branch stamp
  • export --draft (watermarked, never approved)
  • The GitHub Action scan, gate and pull-request comment

Free trial

$0 30 days

All the paid commands, for one GitHub owner, with no payment card.

  • Starts when the license service issues your emailed trial key
  • One trial per GitHub owner
  • For evaluation by one GitHub owner
  • After it ends, the free commands keep working and the paid commands refuse with exit code 4

How to start a trial

Subscription

One license covers one GitHub owner, the CLI and the GitHub Action, with no per-seat charge. Monthly and annual plans have the same capabilities.

A GitHub owner is the account name in your repository address: a GitHub organization or a user account. For example, github.com/acme belongs to owner acme. One license covers one GitHub owner; each additional GitHub organization or user account needs its own license.

Monthly

$499 per month

Per GitHub owner. Renews until you cancel.

Annual

$4,990 per year

Per GitHub owner. $998 less than twelve monthly payments ($5,988).

What the paid commands do

  • export: the approved, sendable pack for a buyer
  • publish: an offline HTML and PDF pack
  • pack: one pack across several approved systems
  • answer: fill a buyer questionnaire from the approved graph, including reuse of reviewed answers
  • drift: flag reviewed answers whose evidence has changed

Workflow steps that run these commands need the license too. Scanner output remains a draft until your Trust approver approves it, and AI TrustBOM does not certify compliance.

Trial terms and how a key is delivered

  • Trial: there is no trial web form. You request it from the CLI, when your first paid command asks for a key or with trustbom license request-trial. After a privacy notice and your confirmation, the CLI sends your email address, your GitHub owner and the client version to the license service, which emails you a trial key. The key is never returned to the CLI directly.
  • Subscription: after your first payment, the license service emails a new paid key to the purchaser. The trial key simply expires; you replace it once, on each machine and in your CI secret.
  • One key per GitHub owner: your administrator keeps the key securely and shares it with your engineers and CI. There is no seat or machine cap. Lost or leaked keys, organization renames and corrections are handled by us by email; there is no self-service portal.
  • Owner binding: a license is bound to one GitHub owner. A repository under a different owner needs its own license.

Billing and cancellation

  • Payments are handled by Paddle, the merchant of record, which is the seller on your invoice and handles tax. Prices exclude tax; any applicable sales tax or VAT is added at checkout.
  • Cancelling stops future renewal. It does not shorten a billing period you have already paid for.
  • We give at least 30 days' written notice before changing the price of an existing subscription.
  • Support is by email on a best-effort basis, with no service level. See the terms and the refund policy.