Free
For getting started with one repo
€0per month
No credit card needed
- 1 monitored repo
- Owners and deadlines
- Decision history
Plans and pricing
Start free. Add more repos as you grow.
Every plan includes dependency scans, fix PRs for eligible findings, and a history of your team's decisions. Prices exclude VAT.
Starter
For small teams that need reports
€19per month
Or US$19 per month, billed in USD
Or €190 / US$190 per year · 2 months free
- 10 monitored repos
- Exportable reports
- Everything in Free
Team
For teams managing more repos
€49per month
Or US$49 per month, billed in USD
Or €490 / US$490 per year · 2 months free
- Unlimited repos
- Deadlines by severity
- Roles and ownership
Compare plans
What’s included
Compare repo limits, reports, and team features. Fix PRs depend on eligibility and a separate GitHub connection.
| Feature | Free | Starter | Team |
|---|---|---|---|
| Find and fix | |||
| Monitored repos | 1 repo | 10 repos | Unlimited |
| Dependabot alerts from GitHub | Included | Included | Included |
| Proveta dependency scans | Included | Included | Included |
| Fix PRs for eligible findings | Included | Included | Included |
| Review and decisions | |||
| Owners and deadlines | Included | Included | Included |
| History of every decision | Included | Included | Included |
| Expiry dates for accepted risks | Included | Included | Included |
| Prioritized findings | Included | Included | Included |
| Runtime or development labels from GitHub | Included | Included | Included |
| Evidence | |||
| Exportable reports by date | Not included | Included | Included |
| Emails when accepted risks expire | Not included | Included | Included |
| Deadlines and roles | |||
| Deadlines by severity and missed deadline records | Not included | Not included | Included |
| Roles and ownership | Not included | Not included | Included |
| Access | |||
| Choose which repositories to connect | Included | Included | Included |
| Your team reviews and merges changes | Included | Included | Included |
What counts
What counts as a monitored repo?
A monitored repo is a GitHub repository you connect to Proveta. Its dependency findings and your team’s decisions stay together. The repo count covers your current connections.
Choose your repos when you install the GitHub App. You can change the selection later. Public and private repos count the same.
Your repository selection
Connect public or private GitHub repos. Repository scanning reads contents from the repos you select.
Your review before merging
Optional fix PRs use a separate write-enabled App. Your team reviews the proposed changes and merges in GitHub.
FAQ
Before you start
Do I need a credit card?
No. Start with 1 repo for free. Upgrade from Settings when you need more repos or reports.
Does Proveta read my code?
Repository scans read a snapshot of your repository contents, which can include source code, and delete it when the scan ends. Code findings keep snippets of up to 200 characters. Uploaded scans read the file you provide. Optional fix PRs use a separate GitHub App with repository contents and pull request write access, enabled by a workspace admin.
Can I use Proveta if Dependabot alerts are off?
Yes. Connect a repository, then open Scans to scan its default branch or upload a supported dependency file. If you also enable Dependabot alerts, matching observations share a finding.
Will Proveta fix every finding automatically?
No. Eligible findings can get a proposed fix PR when an admin has enabled the separate fix connection. Support depends on the dependency and project layout. Your team reviews the changes and CI checks in GitHub before merging. Other findings need a manual update or a documented decision.
How do I choose a plan?
Choose based on the repos you want to monitor and the features you need. Starter includes reports. Team adds unlimited repos, deadlines by severity, and roles.
Can I cancel at any time?
Yes. Plans are billed monthly or annually per workspace. Change or cancel your plan in Stripe from Settings. Cancellation takes effect at the end of the billing period.
Is there an annual plan?
Yes. Starter is €190 or US$190 per year; Team is €490 or US$490 per year. Annual billing includes 2 months free. Choose monthly or annual in Billing.
Can an earlier decision be changed?
Record a new decision when your plans change. Proveta keeps the earlier one in the history so your team can see what changed and why.
Who builds Proveta?
GoStack Software Technologies, Unipessoal, Lda, in Porto, Portugal. For a vendor review, the Security, Subprocessors, DPA, and Terms pages are linked in the footer.
Start now
Try Proveta with 1 repo
Connect a GitHub repo, scan its dependencies, and see what to fix first.
Start free with GitHub