Pricing
Priced per workspace, not per person, because the number of people who look at provenance is not what makes it worth having.
For the whole workspace. Every repository, every person, every feature on this page.
Same figure in every currency, chosen at checkout by where you are.
Cancel from inside the product. No call, no form.
All of it. There is no tier above this one holding anything back.
Not included
Every product page lists what you get. This is the other half, and it is the half you can check us on later.
Not built
SSO and SAMLSign-in is an email and password, with two-factor, or GitHub. There is no directory integration and no way to enforce a domain policy across a team.
None held
SOC 2, ISO 27001 or any audit certificationDiffport holds none, and has not been through a formal penetration test. Claiming otherwise would be the first thing on this page a buyer could check and disprove.
No commitment
An uptime guaranteeNo service level agreement, no uptime figure and no service credits. We would rather say that than publish a number we have not built the operational capability to keep.
The actual numbers
Not a marketing table. These are the values the code enforces, and you will be told by name if you reach one.
Questions
Yes. Add everyone. The value of provenance does not scale with how many people open the dashboard — usually one or two do, and the rest want the alert when it matters. Charging for the others would have taxed the thing that makes it useful, which is the whole team being in it.
Billing starts, and you will have been told before it does. Cancel from inside the product at any point in the trial and nothing is charged. There is no call to book and no form to fill in.
Only when you begin the subscription. Connecting a repository and looking at what Diffport finds does not need one.
A report is generated once, stored, and served back byte for byte. The SHA-256 printed on it matches the file for as long as the file exists, so a report you have already downloaded stays verifiable whatever happens to your account.
Nothing new can be signed against a workspace that is gone. That is the honest limit of it.
The same figure in each — 49 in USD, CAD, GBP or EUR. Stripe picks by where you are at checkout. It is not a conversion, so nobody pays a worse number because of an exchange rate on the day.
Stripe, entirely. There is no payment form anywhere in Diffport and no card details reach this server. What is stored here is a customer id, a subscription id, a status and a renewal date.
No, and not as a policy — as a fact about the permissions. The GitHub App does not request write access, so it cannot push, cannot open a pull request and cannot change a branch. It also never connects to your database. The schema view is rebuilt from the migration files in your pull requests.
Start with one
Connect a repository and read the history before you decide whether any of this is worth forty-nine a month.
