Free
$0/ forever
OSS maintainers & solo devs
- 1 public / open-source repo · ~150K LOC
- Unlimited developers
- 4 full re-scans / mo · unlimited incremental
- 50 PR impact comments / mo
- MCP for Cursor / Claude Code / Cline
Pay for repos,
not developers.
Unlimited developers on every tier — you pay for repos and PR-comment volume, the things that actually cost us to run, never for seats. We run your first scan for you.
Pro
$99/ org / mo
Small teams
- Up to 5 repos · ~1M LOC
- Unlimited developers (never per-seat)
- 30 full re-scans / mo · unlimited incremental
- Weekly calibration re-scan + drift report
- Rich PR comments + Slack digests
- Full runtime overlay
Scale
$299/ org / mo
Larger codebases
- Up to 25 repos · ~5M LOC
- 150 full re-scans / mo
- Private mode + CMK (coming soon)
- Everything in Pro
Enterprise
Custom
Self-hosted in your VPC
- SAML SSO · 99.9% SLA
- Data residency
- Dedicated support
- BYO LLM key
Incremental scans re-map only what a push or PR changed — fast, cheap, unlimited everywhere. Full re-scans rebuild the whole map from scratch (first scan, on-demand rescans, and the weekly calibration that keeps the map honest) and draw from your monthly cap.
One-time audits
Need a verdict, not a subscription?
Same engine, plus human judgment. We run the scan, verify every finding by hand against your repo, and deliver a report you can act on — or hand to a board or an investor. The Codebase Audit is fully credited toward any plan, so it doubles as a paid trial.
Feature-Map Snapshot
$499one-time
See your codebase mapped
- 1 repo · up to ~150K LOC
- Automated report: features, flows, bus factor, hotspots, coverage
- PDF + 30 days of dashboard access
- 24h turnaround
Codebase Audit
$1,900one-time
New CTO, refactor quarter, handover
- Up to 3 repos · ~1M LOC
- Every finding verified by a human
- Prioritized top-10 risk register
- 60-min walkthrough call
- 48–72h turnaround
- 100% credited toward any plan within 60 days
Due Diligence
From $5,500one-time
Investors & acquirers
- Any size · multi-repo
- Written third-party report, under NDA
- Bus-factor & key-person risk assessment
- Q&A session with your investment team
- ~5 business days
What's inside the audit
Metrics nobody else measures.
Your scan already tracks bug-fix ratio, health and hotspots. Audits add the layer an EM or architect actually decides with — people, process and risk, derived from git history and joined to your features. Every number ships with a 95% confidence interval and the commits behind it. See a real sample audit →
AI ERA · CTO · board
AI-Authorship Share
What share of each feature's lines was written by AI agents — line-weighted, trailer-verified, an honest lower bound.
Where AI code is working for you, and where it's rotting.
AI ERA · EM
AI vs Human Rework
Lines rewritten within 28 days of landing — code that didn't stick — split by AI and human authorship.
One real audit: AI lines reworked 2.9× more than human lines.
PROCESS · EM
Review Hygiene
Self-merged PRs, zero-review merges, sub-minute rubber-stamp approvals, time-to-review, reviewer concentration — per feature.
The leading indicator your bug-fix ratio lags by a quarter.
DEFECTS · Architect
Defect Origins (SZZ)
Every bug-fix traced back through blame to the commit that introduced the defect: who introduces bugs, where, and how long they live.
Fixes land in the handler; bugs are born in the shared validator. Now you see both.
KNOWLEDGE · EM · investor
Orphaned Code %
The share of each feature's lines whose last author no longer commits — knowledge that already left the building.
Sharper than bus factor: not "few people know this" — nobody active does.
ARCHITECTURE · Architect
Boundary Erosion
Feature pairs that increasingly change together, quarter over quarter, with the exact files where the boundary leaks.
Modularity as a trend, not a feeling — and proof when refactoring works.
DD · Investor · acquirer
SBOM → Features
Full transitive dependency tree, license classes and known CVEs — joined to the features that actually import them.
Not a flat npm-audit dump: "this CVE is reachable from Checkout and Billing."
TESTS · EM · QA
Journey-Level Coverage
Which user journeys are exercised by e2e tests, which by integration only, and which are untested — read directly from the routes your specs visit.
Coverage in product language: "63 journeys: 9 e2e, 21 integration-only, 33 bare."
REALITY · EM · PM
Risk × Usage
Real user journeys mined from your analytics, ranked by traffic and overlaid on every risk metric above.
"Your #2 most-used journey runs through your #1 defect hotspot."
What's included
Compare the tiers.
| Feature | Free | Pro | Scale | Enterprise |
|---|---|---|---|---|
| Core | ||||
| Open-source CLI + MCP server | ||||
| Hosted dashboard | in your VPC | |||
| Repositories | 1 | 5 | 25 | Unlimited |
| Private repos | ||||
| Developers | Unlimited | Unlimited | Unlimited | Unlimited |
| Usage | ||||
| Full re-scans / month | 4 | 30 | 150 | Unlimited |
| PR impact comments / month | 50 | 2,000 | 10,000 | Custom |
| Incremental scans | Unlimited | Unlimited | Unlimited | Unlimited |
| Weekly calibration re-scan + drift report | ||||
| Fair-use codebase size (LOC) | ~150K | ~1M | ~5M | Unlimited |
| Extra repos beyond cap | $15 / repo / mo | $12 / repo / mo | Custom | |
| Boost packs (200 / 1,000 / 5,000 extra full scans) | ||||
| Runtime & privacy | ||||
| Sentry + PostHog attribution | ||||
| Slack digests + REST API | ||||
| Private mode + CMK (coming soon) | soon | self-host | ||
| Sovereign (self-hosted) | ||||
| SAML SSO · audit logs · SLA | ||||
Honest positioning
Where Dynvo fits.
Not a replacement for Sourcegraph. Not a clone of CodeScene. Dynvo lives in a specific slice — feature-level, history-based, git-native. Here's where that slice overlaps with the tools you probably already pay for.
ToolWhat it ownsDynvo' distinct slice
SonarQubeStatic analysis & SAST, at the lineWe group issues by feature and attach runtime signal→CodeSceneBehavioral analysis — hotspots, knowledge riskFeature / flow abstraction + runtime + AI-agent context→SourcegraphCode search & navigation across reposAbstracts code into scored features & flows→CodeRabbitAI review of the PR diffHands the reviewer the feature map + blast radius→Swarmia · LinearBEngineering metrics, per developerPer-feature code health, not per-dev throughput→Sentry · PostHogProduction errors & product usageWe consume them — map the signal onto features→Questions
Frequently asked.
Why unlimited developers instead of per-seat?
Developers aren't what cost us money — the code we scan and PR-comment volume are. Invite every engineer, EM, PM and contractor; your bill doesn't move. Per-seat tools punish you for inviting the people who most need visibility.
What is the Founding 20 offer?
The first 20 organizations lock founding pricing forever — Pro at $49/mo or Scale at $199/mo — in exchange for your logo on this site and a 30-minute feedback call each month for the first three months. After 20 orgs, list pricing applies. When it's gone, it's gone.
How is a one-time audit different from a subscription?
Same engine, different deliverable. The subscription is the living map: it re-scans on every push, comments on every PR, and sends weekly drift digests — fully automated. An audit is a point-in-time deep read where a human verifies every finding, writes a prioritized risk register, and walks you through it — a report you can hand to a board or an investor. The Codebase Audit is 100% credited toward any plan within 60 days, so it works as a paid trial, not a fork in the road.
Is there really a free tier?
Yes, with no trial clock. The CLI and MCP server are source-available (FSL — free to use and read; each release converts to Apache-2.0 after two years) and free forever (bring your own LLM key). The hosted Free tier covers one public / open-source repo up to ~150K LOC, with 4 full re-scans and 50 PR comments per month — incremental scans stay unlimited. Runtime integrations (Sentry, PostHog, Slack) are Pro and above.
What counts as a scan?
Incremental scans (on push / PR) are unlimited on every tier. Full re-scans (initial, on-demand, and the weekly calibration re-scan) draw from your monthly cap — 4 on Free, 30 on Pro, 150 on Scale, unlimited on Enterprise. The billing page shows your running usage. Need more in a busy month? Boost packs add 200, 1,000 or 5,000 extra full scans as one-time top-ups — incremental scans are never limited.
What is the weekly calibration re-scan?
Once a week (paid tiers) we re-run a full cold scan of each repo and diff it against last week's anchor. The fresh full scan is the ground truth that corrects any drift the fast incremental scans accumulated, and the diff — features added or removed, coverage and flow shifts — lands in your Slack digest. It draws from the same monthly full-scan cap.
How do monorepos count against the repo limit?
One repository = one slot, monorepos included — a 12-package Turborepo is still one repo. What scales with codebase size is the fair-use LOC cap (~150K Free, ~1M Pro, ~5M Scale), so very large monorepos usually land on Scale via LOC, not slot count. Inside the dashboard each workspace package is still mapped and scored as its own project.
Do you ever store our source code?
Never, on any tier. The scanner processes code in memory only and discards it. We store derived metadata; which fields are encrypted depends on your privacy mode. See the security page for the full data-flow.
Do you offer on-prem deployment?
Yes, on Enterprise. Dynvo runs entirely in your VPC (Sovereign mode) with SAML SSO, custom retention and BYO LLM key. Email hello@dynvo.ai to start.