Try It Free. Pay When It’s Proven.

Sign up, connect a repository, and run up to 10 scans on your own code, deep scans or PR checks. You can even scan a ZIP upload or a public repository without connecting anything. It’s a trial rather than a permanent free tier: enough to evaluate properly, and serious teams tend to use it up within days.

A deep scan is a full investigation of one or more repositories. It sets your baseline. A PR check is a lighter scan of a pull request’s changes, re-run on each commit so nothing new slips in. Both count toward your allowance; PR checks are designed to run constantly.

Usually for one of three reasons: they want PR checks on every repository, which outgrows any scan allowance fast; they need SSO, SCIM, or audit logs to pass their own vendor review; or they need hybrid deployment, where the scanner runs inside their own AWS account and code never leaves their cloud.

By the size of your engineering organization and how you deploy. Book a demo and we’ll give you a number on the call.

The scanning itself is the same everywhere; plans change how much and where, not how well. Slack notifications and API access arrive with Pro. SSO and SCIM, audit logs, unlimited scanning, and hybrid or on-premise deployment are Enterprise.

A pen test is a point-in-time engagement priced per scope, and most teams run one or two a year. Gecko runs on every commit instead, on a subscription. Most teams keep the pen test their compliance framework requires and use Gecko for the depth in between. Book a call and we will give you a number.