Plans & Pricing
VibeReview is sold in four tiers — Demo, Individual, Team, and Enterprise. Every paid plan starts with a 14-day free trial, and the Demo tier is free forever. This page is the source of truth for which capabilities are available on which plan; the rest of the documentation links back here wherever a feature is plan-gated.
Prices and limits below reflect vibereview.app/pricing at the time of writing. Always confirm current pricing on that page — your tenant's actual limits are shown under Settings → Billing.
Plan comparison
| Capability | Demo | Individual | Team | Enterprise |
|---|---|---|---|---|
| Price | $0 forever | $15 / mo (billed annually) | $24 / dev / mo (billed annually) | Custom |
| Free trial | n/a (free) | 14 days | 14 days | 14 days |
| Users | 1 | 1 | 5-dev minimum, unlimited additional at the same rate | Unlimited |
| Repos / projects | 1 | 5 | 20 included (then $10/repo/mo) | Unlimited |
| Codebase profiles | 1 total | 15 / month | 50 / month | Unlimited |
| PR reviews | 25 total | 75 / month | 1,000 / month | Unlimited |
| Audit-log retention | 7 days | — | 90 days | 1 year (extended available) |
| Pre-built guardrails | ✅ | ✅ 846 rules / 77 packs | ✅ | ✅ |
| Custom guardrails | ❌ | ❌ | ✅ write & share across projects | ✅ org-wide policy management |
| Architectural profiling | ❌ | ❌ | ✅ quarterly per repo | ✅ quarterly + on-demand |
| MCP / IDE integration | Claude Code, Cursor, Codex, Copilot | All supported IDEs | All supported IDEs | All supported IDEs |
| SSO | GitHub / Google | GitHub / Google | OIDC + GitHub / Google | SAML + SCIM + OIDC + GitHub / Google |
| Team admin dashboard & telemetry | ❌ | ❌ | ✅ | ✅ |
| Compliance evidence export | ❌ | ❌ | ❌ | ✅ SOC 2, ISO 27001, PCI DSS, DORA, EU CRA |
| Data residency | — | — | — | ✅ US / EU / APAC |
| Self-hosting / on-prem | ❌ | ❌ | ❌ | ✅ Docker Compose / Helm, air-gap capable |
| Support | Community | Community | Email (48-hour) | Priority SLA (4-hour, 24×7) + dedicated TAM |
Tier details
Demo — $0, forever
Try VibeReview on a real repo with no credit card and no expiration: 1 user, 1 repo, 1 codebase profile (total), 25 PR reviews (total), 7-day audit-log retention, GitHub/Google SSO, MCP integration with Claude Code, Cursor, Codex, and Copilot, and community support.
Individual — $15/month (billed annually)
For solo engineers shipping AI-assisted code: 1 user, 5 repos, 15 codebase profiles/month, 75 PR reviews/month, the full pre-built guardrail library (846 rules across 77 packs), GitHub/Google SSO, MCP integration with all supported IDEs, and community support.
Team — $24/dev/month (billed annually) · Most popular
For teams: a 5-developer minimum with unlimited additional developers at the same rate, 20 repos included ($10/repo/month after), 50 codebase profiles/month, 1,000 PR reviews/month, 90-day audit-log retention, a team admin dashboard with team-level telemetry, custom guardrails you write and share across projects, architectural profiling (quarterly per repo), OIDC SSO plus GitHub/Google, and email support (48-hour response).
Enterprise — Custom
For organizations with compliance, data-residency, and procurement requirements: unlimited users, repos, profiles, and PR reviews, 1-year audit-log retention, SAML SSO + SCIM provisioning, architectural profiling with on-demand refresh, integration with SecurityReview.ai (enterprise AI threat modeling & security design review), compliance evidence export (SOC 2, ISO 27001, PCI DSS, DORA, EU CRA), org-wide custom guardrail policy management, custom data residency (US/EU/APAC), a dedicated technical account manager, priority support with a 4-hour 24×7 SLA, an on-prem deployment option (Docker Compose / Helm, air-gap capable), and procurement support (MSA, DPA, security questionnaires).
What you're buying
VibeReview is priced against the AI-coding loop you stop paying for — the review passes, second-opinion prompts, and fix cycles that balloon token spend. Each tier is sized to the volume of that loop you're replacing.
Frequently asked
Do you store my source code? No. VibeReview reads it to build a profile, then keeps only profile metadata (languages, frameworks, etc.) — not your source.
How does it work with Claude Code / Cursor / Codex? Via MCP. You add a small config entry (see CLI → Installation) and your IDE pulls the right guardrails on every prompt. The IDE never sends your source to VibeReview — only which rules apply.
Can I write my own guardrails? Yes, on Team and above. Add them in the dashboard or via the CLI; they appear in your IDE on the next sync. See Guardrails.
Do you support self-hosting? Yes — on-prem deployment is included with Enterprise (Docker Compose or Helm with Postgres, Zitadel, and the API container, gated by a license key). Talk to sales for sizing and air-gap needs.
What if I cancel? Cancel any time. Your tenant stops at the end of the billing period, and your guardrails and projects are safe-archived for 90 days so you can restart without losing your setup.
Compliance
VibeReview is SOC 2 Type II and ISO 27001 certified, with independently audited controls for security, availability, and confidentiality. Enterprise plans add compliance evidence export for SOC 2, ISO 27001, PCI DSS, DORA, and EU CRA.