The CLI and its rules are free and open source.
The corpus that catches the rest is what you pay for.
The bolvrk CLI is MIT-licensed and bundles the free rules — the outage core and credential hygiene — so correctness is never paywalled. The same free rules run in the hosted service on the Free plan, with the run log, PR comments and notifications. Every other rule is proprietary and runs only in the hosted service on a paid plan, alongside live-schema context, team policy and AI review.
Startup
$49/monthexcl. VAT
Flat per team, never per seat — self-serve, no sales calls
- Everything in Free
- The full corpus — every rule, on every check
- Live-schema (tier-2) refinement: table sizes, traffic, foreign keys
- 2 stored connections for zero-setup CI
- Insights — what goes wrong, how often, trending where
- Checks still never metered
Scale
$199/monthexcl. VAT
For teams where migrations ship daily
- Everything in Startup
- Team policy: the block threshold and per-rule overrides, org-wide
- 25 stored connections
- AI migration review — advisory, never the verdict — 500 / month
- Priority support
Enterprise
Custom
Your limits, your terms
- Everything in Scale
- Custom connection & AI-review limits, set by us for you
- Invoicing & procurement support
- Direct line to the team
Free, forever
$0
For every individual and open-source project
- Open-source CLI (MIT) with the same rules, locally
- The free rules, in the cloud: run log, PR comments, notifications
- Sign-in, team and tokens, the GitHub Action, findings feedback
- Unlimited checks — validation is never metered
What the free rules check
18 of the 69 documented SQL rules ship in the open-source bolvrk CLI and run locally, plus the credential scanner — and they are the rules a Free team's checks run in the hosted service too. Every other rule is proprietary under the Bolvrk Commercial License and runs only on Startup and above, via --remote and the GitHub Action.
Straight answers about your data and your bill
Does my data leave my infrastructure?
Your migration SQL is analyzed and stored with your check history. Your database is different: tier-2 checks open a short-lived, read-only connection to a shadow database, read catalog metadata (table names, row estimates, indexes — never rows), and disconnect. Nothing from your database is retained. The security page documents the exact boundary.
Is the CLI really open source?
Yes — MIT, source and all. The bolvrk package on npm bundles the free rules listed above, and the LICENSE spells out the split: the CLI and the free rule set are MIT; the rest of the corpus is under the Bolvrk Commercial License and runs only in the hosted service on a paid plan.
Can I use it without the hosted service at all?
Yes. The CLI runs the free rules locally — the outage core and credential hygiene, listed above — with JSON output for scripting, and it never phones home. The rest of the corpus and tier-2 live-schema context need the hosted service on Startup or above, via --remote or the GitHub Action.
On Free, what happens when a migration trips a paid rule?
Nothing is reported for it. A Free team's checks run the free rules only, and the check page says exactly that — which rules ran, and that the rest of the corpus did not. Findings from the free rules still land in the run log and on the pull request; upgrade to Startup and the next check runs the full corpus.
What is AI review?
An advisory second pair of eyes on Scale: commentary on intent, ordering, and rollout strategy — the judgment calls rules cannot make. It is clearly labeled, never blocks a check, and is never part of the safety verdict. The deterministic corpus alone decides.
Can I just fix findings with my own AI?
Yes — that is the point. Point your agent at bolvrk check --json and it has a deterministic verifier to iterate against, free, forever: your model proposes, our checker judges. Validation is never metered, whoever's AI is on the other side; our own AI reviews are 500 per month on Scale.
Do the prices include VAT?
No — prices are in USD and exclude VAT. EU businesses with a valid VAT number are invoiced under the reverse-charge mechanism, so no VAT is added; everyone else is charged VAT at the applicable rate. Enter your VAT number at checkout.
What happens if we stop paying?
The team drops to Free: checks run the free rules only, and the run log, PR comments and notifications keep working. Nothing is deleted — your check history stays, and stored connections are kept but not used until you subscribe again. The CLI keeps working forever; it is MIT-licensed and never needed a subscription.
Start free. Stay free if that's all you need.
Startup is there when your migrations need the full corpus and your real schema behind every check.
Set up your team