Simple, transparent pricing.
Every plan is free until September 1, 2026. Paid billing starts September 1, 2026, ahead of the September 11, 2026 CRA reporting deadline.
Everything is free until September 1, 2026
Activate any plan now. Paid billing begins on September 1, 2026, before the CRA reporting deadline on September 11, 2026.
Free
Core coverage for smaller teams. No credit card required.
- Manual scans on demand
- Basic CVE scanning
- SBOM export (CycloneDX)
- Weekly email digest
- Community support
Starter
For small teams getting CRA-ready.
- Continuous monitoring
- Real-time CVE alerts
- SBOM per commit (CycloneDX & SPDX)
- Up to 5 alert contacts
- CRA compliance dashboard
- Slack & Teams integration
- Email support (48h)
Professional
Full CRA compliance for growing companies.
- Everything in Starter
- Real-time CVE alerts + CISA KEV
- SBOM per commit (all formats)
- Unlimited alert contacts
- CRA conformity reports (PDF)
- 24h → 72h → 14d notification workflow
- EUVD integration
- Priority support (24h)
- Audit log
Frequently asked questions
Can I use Verimu before paid billing starts?
Yes. Every plan is free until September 1, 2026. If you start now, Starter and Professional billing begins on September 1, 2026.
How does billing work for Enterprise?
Enterprise plans are billed annually via invoice (bank transfer, SEPA). We can also accommodate PO-based procurement workflows. Just tell us what works for your finance team.
Do I need to sign a multi-year contract?
No. Monthly plans can be cancelled anytime. Annual plans are paid upfront for the year. Enterprise contracts are typically 12 months but flexible based on your needs.
What payment methods do you accept?
Self-serve plans: credit card or SEPA direct debit. Enterprise: invoice with net-30 terms, bank transfer, or SEPA. We handle VAT calculation automatically for EU businesses.
How do I choose between Starter and Professional?
Starter covers continuous monitoring, dashboards, and team alerting. Professional adds audit logs, EUVD + CISA KEV prioritization, CRA report exports, and the 24h → 72h → 14d notification workflow.
Is my data stored in the EU?
Yes. All Verimu infrastructure runs on EU-based servers. Your code never leaves European soil.
Need a tailored plan for your organization?
We'll scope a plan around your security workflow, procurement needs, and compliance timeline. Most enterprise deals close within a week.
Book a 15-Minute Call