Every record we hold is listed here, newest first. A record is never removed from this list, so a vendor named here stays named here whatever its verdict does afterwards.
restructuredCertKitdiscovered 2026-09-15 · effective date unknownhigh
The free tier is now called 'Homelab' and is for personal, non-commercial use. Is not reflected on the current pricing page. Source ↗
increasedTwingatediscovered 2026-09-07 · effective date unknownlow
The free tier now includes up to 50 resources, not 10. Source ↗
reducedSocket.devdiscovered 2026-09-07 · effective date unknownmedium
The free tier now has 3 members instead of 5, and 500 API quota per hour instead of unlimited. It also includes Socket Basics - SAST, Secrets, and Container scans. Source ↗
increasedFingerprintdiscovered 2026-09-02 · effective date unknownlow
The free tier now includes a 14-day free trial of the Pro Plus plan and offers 500k Android API calls/mo. Source ↗
reducedSemgrepdiscovered 2026-08-28 · effective date unknownmedium
The free tier now includes 60 AI credits and scans up to 10 repositories with a maximum of 10 contributors. Previously 50 private repos (unlimited public). Source ↗
restructuredVirgil Securitydiscovered 2026-08-28 · effective date unknownmedium
The free tier is still offered, but the pricing beyond the free tier is $0.02/month per user beyond 250 users. Source ↗
newKetchdiscovered 2026-08-28 · effective date unknownhigh
The free tier now offers full-feature consent management at $0/month with no credit card required, and no limits on jurisdictions or customization. Source ↗
newPareto Securitydiscovered 2026-08-28 · effective date unknownmedium
A free 'Starter' plan is available for up to 5 devices. It's presented as a general free offering rather than a specific startup program. Source ↗
increasedSocket.devdiscovered 2026-04-12 · effective date unknownlow
Private repo free tier expanded from 1 repo to unlimited repos with 1,000 scans/month and up to 5 members Source ↗
deprecatedProtectumusdiscovered 2026-04-12 · effective date unknownlow
Domain redirects to unrelated 2FA product (Protectimus) We hold no source for this record, so it does not set Protectumus's rating.
removedStackHawkdiscovered 2026-04-12 · effective date unknownlow
Free Developer plan removed, enterprise sales model now We hold no source for this record, so it does not set StackHawk's rating.
increasedTailscalediscovered 2026-04-12 · effective date unknownlow
Free tier expanded: 3→6 users, 100→unlimited devices We hold no source for this record, so it does not set Tailscale's rating.
rebrandedPyUpdiscovered 2026-04-12 · effective date unknownlow
Rebranded to Safety (getsafety.com) We hold no source for this record, so it does not set PyUp's rating.
removedHostedScaneffective 2026-03-05low
HostedScan removed its Free plan (Lite Scans, up to 3 targets) between 2026-01-25 and 2026-03-05; Basic, with a free trial, became the entry plan. Source ↗
We hold 2 more records filed under this category that are not counted above: entries the vendor has since reversed, our own index housekeeping, and corrections to earlier entries of our own. Read the full change log.
At-Risk Vendors
All 3 of the 54 vendors we list in this category that carry one. A vendor is named here for as long as a demotion is in force against it: a one-off pricing event, recorded against a source we cite, whose date falls in the last 180 days — or a standing condition, also cited, such as a free tier withdrawn or a product retired, which does not expire with time. A demotion can lift with nothing about the vendor having changed, and that happens on the day the vendor's newest qualifying event passes 180 days.
All 13 of the 54 vendors we list in this category that qualify, not a selection of them. A vendor is named here for as long as no demotion is in force against it and we hold no change record for it dated in the last 90 days — any record, including ones the timeline above does not count. A vendor can join this section on a day we recorded nothing about it, when the later of those two clocks runs out: 90 days after its newest record, or the day the demotion against it lapses. It leaves on the day we file a new record, or the day we can no longer vouch for the terms we list.