QuantumReadyStart free. Quote the rest to scope.
Public scans are free and need no account. When you need your own private code, the platform starts at S$299 a month, and the final price follows what you actually scan. Enterprise and done-for-you work are quoted after a short conversation.
Prices in Singapore dollars, excluding GST. No charge is made without a written quote.
Free
Public endpoint scans and public repository scans, for anyone, no account needed.
- Unlimited public endpoint scans
- Unlimited public repository scans
- 24-hour report retention
- One offline runner seat
Platform most chosen
Final price quoted to scope
Private code, the workbench, the offline scanner and the MCP server.
- Private repositories and linked accounts
- Cryptographic inventory, owners and migration waves
- Offline scanner seats
- Evidence exports: CSV, JSON, CycloneDX CBOM, SARIF
Enterprise and done-for-you work: quoted
On-premise or air-gapped deployment, custom retention and evidence format, contract terms, security review and a named contact. Assessments, discovery, continuous monitoring and human review of an evidence pack are scoped the same way.
Every row is enforced by the product
A row that is not in the entitlement records cannot appear here. The same records decide what a scan will do.
| What is covered | Free | Platform | Enterprise |
|---|---|---|---|
| Endpoint scan, TLS and certificate | Unlimited | Unlimited | Unlimited |
| Public repository scan | Unlimited | Unlimited | Unlimited |
| Private repository scan, managed through a linked account | not included | Included | Custom |
| Linked GitHub, GitLab or Bitbucket accounts | not included | Included | Custom |
| Offline runner seats | 1 seat | 5 seats, more by quote | Custom |
| Report retention | 24 hours | 365 days | Custom |
| Permanent shareable report links | not included | Yes | Yes |
| Applications rollup across sources | not included | Yes | Yes |
| Parsed source analysis, 11 language families | not included | Yes | Yes |
| Bring your own scanner output, CycloneDX | Yes | Yes | Yes |
| Workbench and migration plan | Yes | Yes | Yes |
What moves the number
Four things, and none of them is a surprise at renewal.
Repositories and accounts
How much private code you scan, and how many source-control accounts you connect.
Runner seats
How many people or pipelines run the offline scanner inside your network.
Retention and evidence
How long evidence is kept, and whether it has to be produced in a format your auditor expects.
Deployment and support
Hosted, on-premise or air-gapped, plus the contract terms and support level your procurement needs.
What people ask before they buy
Is the free plan a trial?
No. Public endpoint scans and public repository scans are free indefinitely and need no account. A plan is needed for private code, longer retention and permanent share links.
Why is the platform price quoted rather than fixed?
The base price covers a single team. The final price follows the number of private repositories, linked accounts, offline runner seats, retention and deployment. We quote after a short scoping call rather than charging for capacity you do not use.
What does Enterprise add?
On-premise or air-gapped deployment, custom retention, contract terms, security review and a named contact. Enterprise is quoted per engagement.
Does a scan make us compliant?
No. A scan produces technical evidence with stated coverage limits. Compliance also needs attestation, documentation and human review, and those remain yours. We say so on every report.
Start with the free scan
Two minutes on a public repository or a domain, and you will know what the report looks like on your own code. The quote conversation is easier after that.