Pricing FAQ

What's in the OSS tier (Free)?

10 BC detectors via GitHub Action

What's in the Indie tier ($49/mo)?

50 detectors + dashboard

What's in the Team tier ($199/mo)?

90+ detectors + auto-fix PRs + custom BC#

What's in the Enterprise tier ($999/mo)?

on-prem + custom BC training

Can I cancel anytime?

Yes. Monthly plans, no contracts, no penalty. Cancel from your account or email us.

Do you offer annual discounts?

Yes — 2 months free if you pay annually. Contact us.

Is there a free tier?

Yes. Real free tier, not a trial. Built so we can dogfood at $0.

What payment methods?

Stripe (all major cards). ACH and wire for Enterprise.

Do you do refunds?

Pro-rated refund within 7 days, no questions asked.

Where is data stored?

Hetzner EU + OCI US for primary; CF edge for cached assets. EU+US redundancy.

Empire Security — Infrastructure & Perimeter Scans

Beyond source/CI bug-classes: TLS, host CIS hardening, container CVEs, typosquat DNS and external attack-surface. Every report is anchored to the EAS Audit hash-chain — tamper-evident, unlike commodity scanners (Snyk/Qualys/UpGuard/Detectify).

TLS Posture Scan

$49

one-off · testssl.sh / sslyze · protocol, ciphers, cert chain, HSTS, CVEs

Buy scan

Host Hardening Audit

$99

one-off · Lynis CIS · SSH, kernel, patch hygiene + remediation checklist

Buy audit

Container CVE + Docker CIS

$79

per image set · trivy + docker-bench · CVE roll-up + fix list

Buy scan

Typosquat / Brand Monitor

$39

one-off sweep · dnstwist · look-alike / phishing domains

Buy sweep

External Attack-Surface

$149

one-off map · subfinder + urlscan + Shodan · passive recon

Buy map

Full Perimeter Bundle

$249/mo

All five scans as one managed subscription · monthly hash-anchored posture report

Empire Audit Starter

$29/mo

Hash-chained audit-logs-as-a-service · SOC2 path · tamper-evident event ledger

Start Audit

BugClass pricing

Plans

OSS

Indie

Team

Enterprise