Simple, transparent pricing

Start free with open source. Upgrade when you need advanced protection.

Monthly Yearly Save 20%

Want to see it in action first? Try the interactive demo →

Open Source

For personal projects and evaluation

Free
  • Contract validation (JSON Schema + CEL)
  • Vulnerability checks (SQLi, XSS, path traversal)
  • Node.js, Python, Java adapters
  • Prometheus metrics
  • Community support via GitHub
Get Started
Most Popular

Pro

For production applications

$49 /month
  • Everything in Open Source
  • Learning Mode (auto-generate rules)
  • Sink-aware RASP protection
  • Policy hot-reload
  • Priority email support
Get Started

Enterprise

For teams with advanced needs

Custom
  • Everything in Pro
  • Policy management UI
  • SSO / SAML integration
  • SLA guarantee
  • Dedicated support engineer
  • Custom integrations
Contact Sales

Frequently asked questions

What is the difference between Open Source and Pro?

The Open Source version includes contract validation (JSON Schema + CEL) and basic vulnerability checks. Pro adds sink-aware RASP protection that detects dangerous operations like SQL queries or file system access, plus hot-reload for policies and priority support.

Can I use ContractShield in production for free?

Yes! The Open Source core is licensed under Apache 2.0 and can be used in production without restrictions. Pro features are available for teams that need advanced protection and support.

What frameworks do you support?

We support Node.js (Express, Fastify, Hono), Python (FastAPI, Flask), and Java (Spring Boot). All platforms share the same contract-first approach and feature parity.

What about VAT and taxes?

Prices shown exclude VAT. VAT will be calculated at checkout based on your location. Stripe handles secure payment processing.

Can I switch between monthly and yearly?

Yes, you can switch at any time. If you switch from monthly to yearly, you'll get a prorated credit for the remaining days of your current billing period.

See why API business logic security matters →

Security & Compliance

OWASP ASVS Level 1 OpenSSF Scorecard OpenSSF Best Practices SLSA Build Level 1 Apache 2.0 Licensed

Ready to get started?

Install ContractShield in minutes and protect your API today.

npm install @cshield/core
pip install contractshield
Maven: dev.contractshield