How pricing works
You pay for a band of active projects. Everything else is built around that.
Pricing that follows your active projects, not your headcount
MopokeHQ is in early access and prices are not published yet. This page explains how pricing works, so you can judge the fit before you talk to us.
- You pay for
- A band of active projects
- Active project
- An upload in the last 30 days
- Users
- Unlimited, including client portal viewers
- AI
- Pooled AI credits for your organisation
- Archived projects
- Free, evidence kept
- Add-ons
- Supply chain proxy and code review, priced separately
What counts as active
A project is active if it has had an upload in the last 30 days. If twelve projects uploaded this month and thirty sat untouched, twelve count.
Unlimited users
Add your whole team, your contractors and your clients. Nobody has to share a login to keep the bill down.
Archived projects are free
Archive a project when the work ends. It stops counting toward your band and keeps its evidence for the next audit.
Going over your band
Nothing is dropped. Projects over the limit keep uploading but go read-only until you move up a band or archive something.
AI credits
Lilly’s alert notes and client notice drafts draw from a pooled credit balance. If credits run out, safety-critical triage still completes and alerts still send. AI can also be switched off for the whole organisation.
Early access
MopokeHQ is in early access. Tell us about your setup and we will send prices as soon as they are set.
Get early accessAdd-ons
Two parts of MopokeHQ are priced separately, because not every team needs them.
- Supply chain proxy. A registry proxy for npm, Composer and Docker, isolated per organisation.
- Code review. Deterministic checks that can block a merge, plus Lilly’s AI review comments, which never block. Diffs go to an AI provider for this feature, so it is off by default for client projects.
How this compares with other pricing models
Each model makes a different thing expensive. Ours grows with the projects you actively ship.
| Model | Who uses it | What grows your bill |
|---|---|---|
| Per user | GitLab Premium and Ultimate | Every person who needs access |
| Per active contributor | Snyk Enterprise | Developers committing to monitored projects |
| Per target | HostedScan, Intruder, Detectify | Each host, domain or app scanned |
| Per finding | DefectDojo Pro | Findings processed |
| Per active project | MopokeHQ | Projects with an upload in the last 30 days |
See the comparisons with GitLab Ultimate, Snyk and HostedScan for detail.
Questions
How much does MopokeHQ cost?
Prices are not published yet while MopokeHQ is in early access. Pricing is by band of active projects, with unlimited users.
What is an active project?
A project with an upload in the last 30 days.
Do client portal viewers count as users?
They are users, and users are unlimited, so they cost nothing extra.
What happens if I go over my band?
Nothing is dropped. Projects over the limit keep uploading but go read-only until you move up a band or archive something.
What happens when AI credits run out?
Safety-critical triage still completes, and alerts still send.
Are archived projects charged?
No. Archived projects are free and keep their evidence.
Are the supply chain proxy and code review included?
No. They are add-ons, priced separately.
Put a mopoke on night watch
One job in your CI pipeline. Your first SBOM is matched against every advisory we hold within minutes.