Pricing
Start with one free app. Add apps on Pro from USD $2 per app per month, or choose Team for faster checks, more alert channels and reports.
Free
Free
One app. No card needed, no time limit
- One app, watched the same way as a paid one
- Instant email on high and critical advisories
- Daily or weekly digest, your choice
- App/group notification controls
- Full alert history
- API, MCP and GitHub Action access
Pro
Two or more appsUSD $2
per app per month, or USD $19.20 per app per year
Everything in Free, plus
- As many apps as you want, each watched the same way
- Your first app stays free, so five apps costs USD $8
- Stack Insights, which is closed on the free plan
- Add or archive an app any time; billable slots have a 30-day hold
- Monthly or yearly, switched from the billing page
One subscription with a count on it. Cancel any time and your apps pause rather than delete.
Team
USD $5
per app per month, or USD $48 per app per year
Everything in Pro, plus
- Slack, Discord and webhook alerts
- Checks every 10 minutes instead of every 30
- Audit export and a monthly PDF report
- Email the founder, usually within one business day
Every app is billed on Team. There is no free first app.
New accounts get 5 apps free for 7 days, then keep your first one free forever. With no paid plan, extra apps pause after the trial; they are not deleted. No card means no automatic charge.
Instant email on high and critical advisories is free on every plan.
Prices are in US dollars. The operator is registered for Australian GST. Checkout shows applicable tax and the final total before payment.
Advisory feeds are scheduled every 10 minutes for every plan. Your apps are re-checked against them about every 30 minutes on Free and Pro, and every 10 minutes on Team. A new upload is checked straight away. Delays can happen, and the status page shows when each job last ran.
Enterprise. More than 20 members, single sign-on, invoicing or an SLA? Talk to us. Contact us.
Line by line, what each plan gets
Free and Pro watch an app in exactly the same way, so almost every row is ticked three times. Pro buys you more apps and Stack Insights. Team changes how alerts reach you, how fast they arrive and what you can hand to someone else.
| Compare | FreeFree16 of 22 | ProUSD $218 of 22 | TeamUSD $521 of 22 |
|---|---|---|---|
| Apps | |||
| Cost per app, per month | Free | USD $2 | USD $5 |
| Apps you can watch | One | Any number | Any number |
| First app free | Included | Included | Not included |
| Prorated when the count changes | Not included | Included | Included |
| Watching | |||
| How often we check | Every 30 min | Every 30 min | Every 10 min |
| OSV, GitHub, NVD and CISA feeds | Included | Included | Included |
| Exploited-in-the-wild flags | Included | Included | Included |
| End-of-life runtime warnings | Included | Included | Included |
| Stack view and health score | Included | Included | Included |
| Alerts | |||
| Instant email, high and critical | Included | Included | Included |
| Daily or weekly digest | Included | Included | Included |
| App/group notification controls | Included | Included | Included |
| Available fixes and review prompts | Included | Included | Included |
| Full alert history | Included | Included | Included |
| Slack, Discord and webhooks | Not included | Not included | Included |
| Build on it | |||
| CLI, prompt and MCP setup | Included | Included | Included |
| API access | Included | Included | Included |
| MCP server | Included | Included | Included |
| GitHub Action snippet | Included | Included | Included |
| Stack Insights | Not included | Included | Included |
| People and reporting | |||
| Share with up to 20 people | Included | Included | Included |
| Shared groups | Included | Included | Included |
| Audit export | Not included | Not included | Included |
| Monthly PDF report | Not included | Not included | Included |
| Founder email, one business day | Not included | Not included | Included |
Sharing works the same on all three plans: up to 20 people per account, with shared groups. Past that it is Enterprise.
What will it cost you?
Choose how many apps you want watched.
Drag to set the number of apps. The first one is free, so you pay for the rest.
Per month
$4
USD, for 2 paid apps
Over a year
$48
USD, billed monthly
Archiving or deleting an app holds its billable slot for 30 days. Tax is shown at checkout.
3 apps: the first is free, and the remaining 2 come to $4 USD a month.
How the money works
Billing details
Prices may change
Example: archiving an app
Common questions
What exactly do you store about my app?
Package names, versions, ecosystems, dependency flags, runtimes, frameworks, hosting, service and tool names, scan date, generator version, app identity, optional groups/tags and workspace counts. No code, no paths, no env values, no keys, no repo URLs. The CLI refuses to read .env files, and the server rejects any manifest that contains something secret-shaped.
Why not just use Dependabot or npm audit?
Keep using them. Dependabot works one GitHub repo at a time. npm audit checks the lockfile in the folder you are in, when you run it. VibeBeacon keeps your last upload for every app and re-checks it on a schedule, without repo access. It also flags runtime versions near end of life and shows security news from the services you list. The comparison page has more detail.
What if I cannot run a shell, like on Lovable, v0 or Bolt?
Use the no-shell prompt. It asks your AI tool to write the JSON from package.json and the lockfile. A version read from a range like ^15.1.0 is a guess, so we mark it unresolved and match it conservatively.
How much email will I get?
By default, only high and critical matches send an instant email. Everything else goes into a daily digest, and news is batched weekly. You can change this for each app or group. Dev-only dependencies do not send instant email by default.
Why should I trust you?
You do not have to. Run the CLI with --json and read the file before anything is sent. The source repository is private, but you can download the published npm package and read it. The privacy page shows the JSON we receive. Each app page lists what we hold, with a delete button. We never ask for access to your code, your host or your database.
Longer answers, including Dependabot, npm audit, Snyk and OSV-Scanner, are on the comparison page.