Pricing
Flat rate per organization, not per seat. All billing — upgrades, downgrades, cancellations — is handled through GitHub Marketplace.
Free
$0
Forever, for public repos
- Unlimited public repositories
- Full scanning on every push and PR
- Automatic SHA-pinning remediation PRs
- Private repos: one-time remediation PR (no ongoing enforcement)
Coming soon
Pro
$19/month per org
Not open for purchase yet — will be billed via GitHub Marketplace once it ships
- Everything in Free
- Ongoing enforcement status check on private repos
- Blocks new unpinned Actions from merging
- Covers up to ~20 private repos per org
- Priority support
Need more than ~20 repos, or buying for multiple client orgs as an MSP?
Reach out via Support — we do volume and MSP pricing on a conversation basis.
FAQ
Why is it free for public repos?
Open source is where supply-chain attacks do the most damage, and where we want ActionLock installed as widely as possible.
What happens if I go over the repo cap?
We'll reach out before anything breaks. Nothing is silently disabled.
Can I cancel anytime?
Yes — all plan changes, including cancellation, are managed directly through your GitHub Marketplace purchase settings.