Free
For trying Qualipr on one small codebase.
IDR 0 /month
- Main branch only
- Up to 50,000 LOC
- Up to 5 users
- SAST & Code Quality Analysis
- Shared Runner included
- No Merge Request scans
Pricing
Transparent pricing that grows with your team.
Start free, pay for the size of your codebase, and add DAST or a Dedicated Runner only when you need them.
Team
For teams that need scanning across their workflow.
From IDR 434,000 /month
- All six Application Security Suite modules (Application Testing is an add-on)
- From 100K LOC
- Scan all branches and Merge Requests
- Shared Runner included
- Add DAST and a Dedicated Runner
Enterprise
For organizations with specific capacity and governance needs.
Custom
- All six Application Security Suite modules (Application Testing is an add-on)
- Large LOC capacity
- Capacity and concurrency settings
- Dedicated Runner option
- Enterprise governance and support
Estimate your costs
Work out your monthly cost
Choose your SAST capacity, then add DAST and a Dedicated Runner if you need them. Totals come straight from the official price list.
SAST & Code Quality
Choose the LOC capacity of your codebase.
100K LOC Team
DAST
Dynamic testing add-on for web applications and APIs.
Dedicated Runner
Exclusive capacity add-on for SAST and DAST jobs.
Team pricing by LOC
| Capacity | Price / month |
|---|---|
| 100K LOC | IDR 434,000 |
| 200K LOC | IDR 1,270,000 |
| 300K LOC | IDR 2,550,000 |
| 500K LOC | IDR 4,280,000 |
| 700K LOC | IDR 5,750,000 |
| 1M LOC | IDR 8,550,000 |
| 1.5M LOC | IDR 12,890,000 |
| 1.9M LOC | IDR 16,080,000 |
Dedicated Runner
| Size | Capacity | Price / month |
|---|---|---|
| Small | 2 vCPU · 4 GB RAM | IDR 799,000 |
| Medium | 4 vCPU · 8 GB RAM | IDR 1,399,000 |
| Large | 8 vCPU · 16 GB RAM | IDR 2,499,000 |
Need more capacity?
For codebases above 1.9M LOC, concurrency settings, or dedicated support, we’ll put together an Enterprise offer.
DAST plans
| Feature | Starter | Growth | Scale |
|---|---|---|---|
| Price / month | IDR 299,000 | IDR 999,000 | IDR 1,499,000 |
| Active targets | 1 | 5 | 10 |
| Scans per month | 4 | 20 | 40 |
| Max pages per scan | 50 | 100 | 200 |
| Manual & scheduled scans | Yes | —Not listed for this plan | —Not listed for this plan |
| Authenticated scanning | —Not listed for this plan | Yes | —Not listed for this plan |
| Advanced authentication | —Not listed for this plan | —Not listed for this plan | Yes |
| API scanning | —Not listed for this plan | Yes | Yes |
| Concurrent scans (max) | —Not listed for this plan | 2 | 4 |
| Scan history | —Not listed for this plan | 90 days | 180 days |
Comparison
Compare SAST & Code Quality plans
| Feature | Free | Team | Enterprise |
|---|---|---|---|
| LOC capacity | Up to 50,000 | 100K–1.9M | Custom |
| Users | Up to 5 | —Not listed for this plan | —Not listed for this plan |
| Main branch scans | Yes | Yes | Yes |
| Other branches & Merge Requests | No | Yes | Yes |
| Shared Runner | Yes | Yes | —Not listed for this plan |
| DAST add-on | Needs confirmation | Add-on | Option |
| Dedicated Runner | Needs confirmation | Add-on | Option |
| Capacity & concurrency settings | —Not listed for this plan | —Not listed for this plan | Yes |
| Enterprise support | —Not listed for this plan | —Not listed for this plan | Yes |
| Application Security Suite | |||
| Code Security & Quality | |||
| SAST | Yes | Yes | Yes |
| Code Quality | Yes | Yes | Yes |
| DSA Uses DAST findings as its input | No | Yes | Yes |
| Custom rules & secrets scanning | No | Yes | Yes |
| Supply Chain Security | |||
| SCA | No | Yes | Yes |
| Dependency Scanning | No | Yes | Yes |
| SBOM | No | Yes | Yes |
| License Governance | No | Yes | Yes |
| Infrastructure Security | |||
| IaC | No | Yes | Yes |
| Container | No | Yes | Yes |
| Cloud | No | Yes | Yes |
| HSA | No | Yes | Yes |
| Application Testing | |||
| DAST | Needs confirmation | Add-on | Option |
| Web Application Testing | Needs confirmation | Add-on | Option |
| API Testing | Needs confirmation | Add-on | Option |
| Risk & Compliance | |||
| Vulnerability Management | No | Yes | Yes |
| Security Review | No | Yes | Yes |
| Quality Profiles | No | Yes | Yes |
| Quality Gates | No | Yes | Yes |
| Compliance Registry | No | Yes | Yes |
| Platform Operations | |||
| Scan Orchestration | No | Yes | Yes |
| Aggregation & Visibility | No | Yes | Yes |
| Multi-tenant & Governance | No | Yes | Yes |
| Notifications & Integration | No | Yes | Yes |
FAQ
Pricing questions
How is Team pricing calculated?
Team pricing is based on monthly LOC (lines of code) capacity, from IDR 434,000/month for 100K LOC up to IDR 16,080,000/month for 1.9M LOC. The Shared Runner is included. Needs above 1.9M LOC are handled through Enterprise.
Is DAST included in the SAST price?
No. DAST is a separate add-on with three plans, starting at IDR 299,000/month.
What is the difference between DAST Starter, Growth, and Scale?
Starter (IDR 299,000/month): 1 active target, 4 scans/month, up to 50 pages per scan. Growth (IDR 999,000/month): 5 active targets, 20 scans/month, up to 100 pages, authenticated scanning, API scanning, 2 concurrent scans, 90-day history. Scale (IDR 1,499,000/month): 10 active targets, 40 scans/month, up to 200 pages, advanced authentication, API scanning, 4 concurrent scans, 180-day history.
Is the Dedicated Runner required?
No. The Shared Runner is included in Free and Team. The Dedicated Runner is an optional add-on, and buying DAST does not require it.
Can the Dedicated Runner be used for both SAST and DAST?
Yes. The Dedicated Runner provides exclusive execution capacity for both SAST and DAST jobs.
Make security easier to understand, and easier to act on.
Bring your code, applications, dependencies, infrastructure, and security governance into one connected platform.