10 GitHub App PR scans + 1 review · no GitHub keys

Starter, Pro+, Enterprise

Seat-based self-serve for Starter and Pro+. Enterprise is contract-based — licensed developers are not MAU. Modules are included in the plan.

Starter

Core Belfry — billed dashboard seats. Card or bank.

$24/seat/month billed annually
  • Scans, GitHub App PR comments + Check Runs
  • SDK, IDE plugins, belfry verify
  • No minimum seats
  • Runtime protection and SSO are Pro+ / Enterprise
Most Popular

Pro+

Advanced org security. Minimum 5 seats.

$59/seat/month billed annually
  • Runtime firewall, red team, cost, compliance export
  • Minimum 5 seats
  • Card or ACH/bank (settles when Stripe clears)
  • Live pen-test, mesh, SSO are Enterprise

Enterprise

Built for organizations deploying AI at scale.

Custom
  • Contract-based — licensed developers ≠ MAU
  • Live Assessor, DeepScan, SBOM, MCP/A2A mesh
  • SSO, custom RBAC, SIEM, on-prem / hybrid

What is in each plan

Modules are entitlements, not add-on SKUs. See the products page for the full story.

ModuleStarterPro+Enterprise
Static Scan
static-scan
Runtime Protection
runtime-protection
Live Pen Test
live-pentest
Red Team
red-team
Cost Optimization
cost-optimization
Model Monitoring
model-monitoring
Security Review
security-review
Compliance
compliance
SBOM / AIBOM
sbom
Lifecycle Governance
lifecycle-governance
MCP / A2A Mesh
mcp-mesh

SMB Security Assessment

static-scan + live-pentest + security-review + compliance

Fixed-scope assessment for a single product team.

AI Ops

cost-optimization + model-monitoring

Production cost control and degradation tracking.

Governance

lifecycle-governance + compliance + sbom

Approvals, asset registry, evidence, and supply chain.

Customer scorecards
SOC 2 mapping
NIST AI RMF
EU AI Act Article 50

Frequently Asked Questions

Everything you need to know about our pricing

Is this per tenant, per repo, or per seat?

Starter and Pro+ are per billed dashboard seat. Starter has no minimum. Pro+ requires 5 seats. Enterprise is a contract: licensed/governed developers are not the same as monthly active users (MAU).

What is MAU vs licensed developers?

Licensed developers are who your contract covers. MAU is unique humans who actually used Belfry in the calendar month. A 100-developer / 40-MAU contract still covers 100 people if only 25 used the product that month.

What do I get before I pay?

Install the GitHub App for 10 PR static scans and one complimentary Security & Architecture Review. Extra reviews are $99 one-time. Then subscribe to Starter or Pro+.

Are you EU AI Act or ISO certified?

No. We produce point-in-time scorecards of your system (Article 50 duties apply from 2 August 2026). That is not a claim that Belfry Labs is certified.