Every tier runs the complete platform — SBOM generation, scan policies, secret scanning, and the governed MCP server included; attestation signing is rolling out. Bands are self-assessed in good faith; there is no seat counting in the product, by design.
Self-serve
$0
Free for commercial use
$1,900 / year
Commercial · up to 10 developers · ~$16/dev/mo
$4,500 / year
Commercial · 11–25 developers · ~$15/dev/mo
*Perpetual fallback: if your subscription lapses you keep running the last version you received — you lose updates and support, not your factory. Purchasing is by invoice: email us your company name and developer band, and you’ll have an invoice the same business day.
Quoted
26+ developers, regulated industries. Priority support under a contracted next-business-day response with queue priority, named technical contact, security-review support, an assembled and control-mapped compliance evidence pack, private disclosure channel. Faster response tiers and a full migration engagement are quoted separately.
| Band | Developers | Rate / dev / yr | Indicative annual |
|---|---|---|---|
| E1 | 26–100 | $180 | $4,700 – $18,000 |
| E2 | 101–250 | $150 | $15,200 – $37,500 |
| E3 | 251–500 | $125 | $31,400 – $62,500 |
| E4 | 500+ | Custom | |
Basic scanners are widely available at every price, including free. What’s gated is the evidence and management layer: GitLab reserves dependency scanning, the dependency list/SBOM view, the vulnerability report and MR/pipeline security-tab presentation of findings for Ultimate — the tier for which GitLab publishes no list price (verified 11 Aug 2026 against about.gitlab.com/pricing, which shows “Get custom pricing” for Ultimate). The highest GitLab tier with a published price is Premium — $29/user/month billed annually, $34,800/yr at 100 developers — and Premium excludes those same surfaces. GitHub gives its supply-chain layer away free on every repository, public and private; what it charges for is code and secret analysis on private repositories, sold separately since 1 April 2025 as GitHub Code Security ($30/active committer/month) and GitHub Secret Protection ($19/active committer/month), verified 11 Aug 2026 against github.com/pricing. At 100 developers that’s $18,000 on Vetrix against $34,800 for GitLab Premium alone, before either vendor’s per-committer security add-ons or metered CI. Vendor list prices move; we’ll show current numbers in your quote.
Request an Enterprise quotePublic sector
Self-hosted on your infrastructure or air-gapped. Because Vetrix has no cloud service component, FedRAMP authorization is not applicable — there is no CSP boundary to assess. Extended LTS, compliance documentation package (SBOM, audit hash-chain verification), and a security POC are included.
Talk to us about government licensingQuestions
You self-assess, in good faith, against the band you buy: a developer is someone with an account who pushes code, runs pipelines, or reviews merge requests in a typical month. There is no metering or license server in the product — deliberately. Contracts include a lightweight annual self-certification instead.
Yes. No minutes, no runner counts, no concurrency charges, no artifact-size fees. “Self-hosted runners are free, always” is a published product commitment — it’s even pinned by a regression test in the codebase.
You keep running the last version you received, indefinitely. You lose updates, security patches, and support — not your data or your factory.
Yes: multi-year prepay (10–15%), registered nonprofits (50%), public-sector education (75%), and if you’re migrating from a metered competitor we’ll match your current spend for year one. First five enterprise design partners get 50% off year one in exchange for a reference.