One agent. Two tiers. The same closed-form Rollback PR.
A free community tier competes with Renovate, Dependabot, and Grype on price. An enterprise SCA tier targets the Snyk / Aikido / Mend / Endor Labs / Socket-style workflows with deeper SBOM, compliance posture, and the SOC 2 evidence a reviewer has to sign. Pick the surface that fits — both ride the same agent.
- Dependency PR factory — Pin, transpose, and auto-upgrade across every project with a passing smoke test attached.
- One-click Rollback PR — The headline capability versus Dependabot & Renovate — closed-form undo, not a manual scratch patch.
- Cloud-API contract watch — Drift detection against Stripe / Twilio / AWS / GCP on a free daily cadence (1 cloud per repo).
- Morning Slack digest — One digest channel — what ran, what broke, what was repaired, and what is still open.
No card required. Pilot wires in one repo and one cron.
- SBOM + compliance posture — CycloneDX / SPDX, SLSA levels, VEX, license policy, and continuous SOC 2 evidence export.
- Cloud-API + dependency watch — Unlimited contracts, unlimited cron schedules, hourly cadence, multi-repo and multi-tenant.
- Rollback PR + repair pipeline — Closed-form rollback, regression test attached, in-thread rationale, low-risk one-merge to apply.
- Priority support + SLA — Named CSM, 4-hour response on P1, SOC 2 Type II report on request, signed DPA available.
30-min scoping call · pilot starts with one repo & one cron.
What you get with each tier.
The same operational watch backbone runs in both tiers — what changes is depth. Enterprise adds the SBOM, compliance posture, and SOC 2 evidence the platform engineer at a regulated company has to hand to a reviewer.
| Capability | Free community | Enterprise SCA |
|---|---|---|
Operational watchThe agent surfaces every repo, registry, cloud contract, and cron schedule in scope — the same backbone Free and Enterprise ride on. | ||
| Repos watched | 1 repo | Unlimited |
| Open-source dependency PRs | Included | Included |
Repair pipelineAuto-fix, in-thread rationale, and the closed-form Rollback PR — the differentiator versus Dependabot, Renovate, and the broader LLM-agent wave. | ||
| Auto-fix with a passing test | Included | Included |
| One-click Rollback PR (closed-form) | Included | Included |
| Cloud-API contract watch | 1 cloud · daily | Unlimited · hourly |
| Cron / scheduled-job supervision | 1 schedule | Unlimited |
| Morning Slack ops digest | One channel | Per-team routing |
SCA & complianceThe depth Enterprise adds on top — SBOM, compliance posture, multi-tenancy, and the evidence a platform engineer at a regulated company has to hand to a reviewer. | ||
| SBOM (CycloneDX / SPDX) | Not available | Included |
| Compliance posture (SLSA / VEX / license) | Not available | Included |
| SOC 2 evidence export | Not available | Included |
| Multi-tenant / RBAC | Not available | Included |
| Support | Community · GitHub | Named CSM · SLA |
Every paid pilot starts with one repo and one cron — the morning digest ships to your Slack within 48 hours.
No procurement gauntlet. No card on file for the free tier. Email us and we will provision a tenant, wire in the first surface, and post the first morning digest to your channel.