Bravos is free to run. A licence adds scans, a shared server and your pipelines.
Bravos runs on each developer’s machine, on a server you host, and as CI/CD execution in your pipeline. On a developer’s machine it costs nothing. A licence adds security scans (SAST) on every machine and pull request, the Bravos server your team shares, and the runner image your pipelines use.
Plans
Every plan here is agreed with us — tell us what you need and we will send paperwork.
Bravos Free
FreeFor one developer, on their own machine.
pipx install bravos
What you get
- The whole pentest loop
bravos auto,run,roundandreplay: stand up a target, fire probes, record verdicts. It all stays on your machine. - Ledger, reports and a local dashboardEvery run writes a ledger under
$BRAVOS_HOME/runs/;bravos dashboardis a local, read-only page over it. bravos cibuild gateReads a run's ledger and your policy, and exits with a code. It contacts no server and needs no licence. Gate a build on a run ↗- Code graph and agent surface
bravos graphships in the wheel;bravos mcpexposes Bravos to your coding agent.
Includes: one machine, and its own history
Bravos Solo
For one person who wants licensed scans and their own server.
Everything in Bravos Free, plus
- Security scans (SAST) on your machine
bravos sast scanruns the deterministic analyzer. Save your licence as~/.bravos/licence.jwtand runbravos setup— Bravos 0.3.1 or later. - Scans on every pull requestAdd your licence as a CI secret named
BRAVOS_LICENCEin each repository you scan. Run Bravos in CI/CD ↗ - Your own Bravos serverSelf-hosted. One place for your team's runs, history and findings across repositories — the part Bravos on one machine cannot do. The CLI, the server and CI ↗
- A licence that renews itselfGive your server a deployment key and it fetches a fresh licence every day. Nobody pastes a token. License a deployment ↗
- CI runner image, from usA pinned image with Bravos, guardlink and cxg built in, so a job does not install them every time. Not on a public registry — we hand it over with your subscription.
- GST invoicesAdd your GSTIN to your billing details before you pay and it is on every invoice.
Includes: no repository limit · cancel any time from your account
Bravos Team
For a team sharing one server, one licence and one invoice.
Everything in Bravos Solo, plus
- Invite and remove your peopleOwners and admins invite members by email and revoke them. Each active member takes a seat.
- Owners, admins and membersOwners and admins name the organisation and manage deployment keys; members use the licence.
- One licence for the whole teamOne signed licence carries your seat count, and your own server enforces it when a credential is issued. How seats are counted ↗
- Invoiced by us, by emailContract plans are invoiced to the details on your billing page. No card on file.
Includes: more on your contract · no repository limit
Bravos Enterprise
For procurement, your own terms, or an estate with no internet.
Everything in Bravos Team, plus
- Seats and term on your contractThe seat count and licence term are agreed with you and printed on your licence.
- Air-gapped licence on a longer termA server with no deployment key makes no outbound request at all, so its licence is issued on a longer term, through us. Air-gapped deployments ↗
- Security review and DPAYour security review and a data processing agreement, on your paperwork rather than ours.
Includes: no repository limit
An estate with no internet?
Bravos checks its licence offline, and a server without a deployment key never dials out. Licences for those estates are issued on a longer term, through us.
Talk to us →Switch between monthly and annual, or change seats
From your account. Changes start with your next billing period, and nothing is charged today.
Your account →One product, three parts
The licence covers the server and the pipeline. Bravos on a developer’s machine is free, except for the security scanner.
Your machine
FreeOn a developer's machine
- The whole pentest loop, and a ledger of every run
bravos ci: fail a build on a confirmed finding- Code graph, local dashboard, and an MCP surface for agents
- Security scans (SAST) take a licence
The server
LicensedOn your infrastructure
- Everyone sees the same findings
- History for every repository, not per laptop
- Seats enforced on your own server
- Renews its licence daily, or runs air-gapped
CI/CD execution
LicensedIn your pipeline
- Security scans on every pull request
- A pinned runner image: the same toolchain on every build
- Bravos, guardlink and cxg built in
Compare plans
Bravos on your machine
bravos auto, run, round, replaySecurity scans (SAST)
bravos sast scan on a developer's machineSave your licence as ~/.bravos/licence.jwt and run bravos setup — Bravos 0.3.1 or later.BRAVOS_LICENCE. Run Bravos in CI/CD ↗The Bravos server
bravos pushCI/CD execution
People
Seats and billing
Questions buyers ask
What is free, and what does a licence add?
Bravos Free costs nothing on a developer's own machine: the whole pentest loop, the ledger, the bravos ci build gate, the code graph and the agent surface. A licence adds security scans (SAST) on developers' machines and in CI, the Bravos server your team shares, and the CI runner image. The CLI, the server and CI ↗
What counts as a seat?
One person holding a credential on your Bravos server. Your server counts them when a credential is issued, against the seat count printed on your licence. How seats are counted ↗
Can I switch between monthly and annual, or add seats, later?
Yes, from your account page. Changes take effect at the start of your next billing period, and nothing is charged today. On a contract plan, talk to us.
What happens if I cancel?
Your plan runs to the end of the period you have paid for, and your server keeps taking new runs for a while after that — your account page shows the exact date. Everything already on it stays readable.
Not sure which plan?
Tell us about your team and your estate. This page needs no sign-in, so you can send it to whoever signs off the spend.
How licensing works — the 30-day term, the daily refresh, seats, and what a lapsed licence still does — is in the docs.