Simple, transparent pricing
Start free. Upgrade when you need more frameworks or governance features. Early access — request access and we’ll be in touch.
Free
Everything you need to start governing AI-generated code — free forever.
- 5 standards packs (158 rules)
- OWASP Top 10, SOC 2, Python Security, Go Security, Supply Chain
- CLI scanning & gate
- Management dashboard
- VS Code & Cursor extension
- MCP server for Claude Code, Cursor, Cline
- GitHub Action
- SBOM, CVE scanning, secrets detection
- Risk scoring on findings
- Community support (GitHub Discussions)
Team
Advanced compliance for growing teams with regulatory obligations.
- Everything in Free, plus:
- 16 standards packs (368+ rules)
- HIPAA, PCI-DSS, ISO 27001, GDPR
- FDA / IEC 62304, NIST 800-53, CMMC, EU AI Act
- Work item reconciliation (GitHub, Azure DevOps, Jira)
- PR decoration with regulatory clause citations
- Auto-fix vulnerable dependencies
- Compliance evidence map
- Email support
Organization
Full governance for compliance-driven organizations and regulated industries.
- Everything in Team, plus:
- 22 standards packs (526 rules)
- MISRA-C, DO-178C, ISO 26262
- ISO 14971, IEC 81001-5-1, 21 CFR Part 11
- Governance profiles (strict / standard / permissive)
- AI agent identity & session tracking
- Task/intent binding with scope enforcement
- Anomaly detection & blast radius enforcement
- Signed compliance attestations
- Parallel scanning & multi-agent scan mode
- Audit log with HMAC integrity signatures
- Priority email support
Enterprise
Full platform for large regulated teams with dedicated support and custom SLAs.
- Everything in Organization, plus:
- Human-in-the-loop approval workflows
- Auditor portal with time-boxed access tokens
- GRC integration (Drata, Vanta, Secureframe)
- C/C++ semantic analysis (clang-tidy / cppcheck)
- Custom rule pack authoring
- Seat management & SSO
- AI harness compliance evidence reports
- Dedicated support & implementation assistance
- Custom SLA
Common questions
What’s included in the free tier?
5 standards packs covering OWASP Top 10, SOC 2, Python Security, Go Security, and Supply Chain Security — 158 rules total. The VS Code extension, CLI, dashboard, MCP server, and CI/CD gate are all free. Free tier is permanent, not a trial.
How do I access paid tiers during early access?
Email hello@sentrik.dev or contact us using the buttons above. We’re onboarding teams manually during early access to ensure a quality experience.
Does it work with Cursor?
Yes. Cursor supports VS Code extensions directly — install the Sentrik extension from the VS Code Marketplace and it works in Cursor. The MCP server integration also works with Cursor’s MCP support.
Can it run offline / in air-gapped environments?
Yes. License validation uses HMAC signatures with no phone-home requirement. All scanning runs locally. No cloud dependency for any core feature.
What CI/CD systems are supported?
GitHub Actions (published to Actions Marketplace), Azure Pipelines, and GitLab CI are all supported. The CLI can run in any CI environment that supports npm or pip.
Do you support custom rules?
Yes — custom rule packs are available on the Organization and Enterprise tiers. Rules support regex, AST queries (25 languages via tree-sitter), file policies, and LLM-powered semantic checks.