OrbitalReg
Sign in →

Pricing

OrbitalReg pricing: free forever, then one flat fee per deployment.

The security layer is free and never expires. A licence adds single sign-on, replication, integrations and the migration importers. It is priced per deployment, never per user, with no charge for adding environments, regions or replicas.

Try it free for 30 days → Compare with JFrog's prices

OrbitalReg Free · forever

€0: no contract, no signup wall, no expiry cliff

Every installation starts with a 30-day trial of everything. Afterwards the security layer keeps running free: advisory matching and SBOMs, Trivy and Grype per project, the pull-gate with your own Rego rules, signature verification and the append-only audit log. An expired trial never blocks a build.

Design Partner · Limited cohort

€100/year

1 cluster licence · feedback in exchange for full access

  • ✓ 1 cluster licence, full-featured access
  • ✓ Shape the product roadmap
  • ✓ Optional graduation to Commercial after year 1

You commit to: regular feedback calls, use-case sharing, beta-testing new features, a public quote we can use after the trial.

Commercial · Year 1 entry

€10,000 in year 1

3 cluster licences · upgrade to Lifetime-locked for a multi-year price guarantee

  • ✓ 3 cluster licences (dev, main, prod)
  • ✓ Scale up your clusters, unlimited. Add clusters, regions and replicas with no per-instance fees
  • ✓ Importers + migration CLI for Artifactory, Nexus and five more
  • ✓ Email support during business hours
  • ✓ All security features always-on, no upcharge

Long-term Partner · Lifetime price lock

Lifetime-locked

Multi-year contract · sized to your company · the price you sign for never rises

  • ✓Lifetime price guarantee: the price never rises
  • ✓Sized to your company, with no enterprise list-price markup
  • ✓3-year contract, price locked for the entire term
  • ✓3 cluster licences (dev, main, prod) · scale each unlimited
  • ✓Roadmap influence + optional 24/7 support add-on

Prices in EUR. Multi-year pricing requires a 3-year commitment to lock the cap; renewal at the same cap is at your option, never ours.

What's in which

Security is free. A licence adds the enterprise plumbing.

Free, in every licence state

Trial, licensed, expired or never licensed

  • ✓All 40+ formats, with local, remote (proxy) and virtual repositories
  • ✓Advisory matching on every upload (OSV, NVD, GHSA) with an SBOM per artifact; Trivy and Grype per project
  • ✓Pull-gate on CVE severity, licence, signature and SBOM, plus your own Rego rules
  • ✓Signature verification on pull (Sigstore, PGP, CMS, RSA) against your trust bundles
  • ✓Security blocks by path, pattern or sha256, with public block pages
  • ✓SPDX licence allow-, deny- and require-lists per project
  • ✓Append-only audit log
  • ✓Air-gapped mode that blocks every outbound call
  • ✓Build-info ingestion and CycloneDX SBOM aggregation
  • ✓Retention rules, backups (PostgreSQL PITR and S3 mirror)
  • ✓Access tokens, service accounts, local sign-in and SCIM provisioning

With a licence or during the trial

Design Partner, Commercial, Long-term Partner

  • +Single sign-on via SAML / OIDC (Entra ID, Okta, Auth0, Keycloak)
  • +OIDC token exchange for GitLab, GitHub and Kubernetes CI, so no long-lived tokens
  • +Replication to and from other OrbitalReg instances and Artifactory mirrors
  • +Signed webhooks, plus Slack, Microsoft Teams and email notifications
  • +Per-project storage and artifact-count quotas
  • +Your logo, banner and help link in the UI
  • +Importers for Artifactory, Nexus, GitHub Packages, GitLab, Azure Artifacts, AWS CodeArtifact and Google Artifact Registry, plus bulk import

The trial, step by step

No cliff at day 30.

Day 1 to 30

Everything on

Starts automatically at first boot with every feature unlocked, including SSO, replication and the importers. No licence key needed.

Grace period

Still everything on

14 days by default, configurable by the operator. That's time to sort out a licence without an outage.

After that

Free, for good

Licensed features switch off; repositories, artifacts and the whole security layer keep serving. Builds don't break.

Lifetime promise

What you will never pay for.

  • ✕ Per-user fees
  • ✕ Per-environment scaling charges
  • ✕ Per-replica or per-cluster surcharges
  • ✕ Security-feature unlocks
  • ✕ Mandatory upgrade fees
  • ✕ Renewal-time price hikes

Self-hosted means we cannot see your usage. We bill what we agree on, year after year. No metering, no surprise audit clauses, no "true-up" invoices.

Questions

Pricing and licensing, answered.

Is the free version of OrbitalReg time-limited?

No. OrbitalReg Free costs €0, needs no contract and never expires. Every installation starts with a 30-day trial of all features; afterwards the licensed features switch off and the security layer (scanning, pull-gate, signature verification, security blocks and the audit log) keeps running for free. An expired trial never blocks a build.

What happens when the 30-day trial ends?

After a grace period (14 days by default, configurable by the operator) the licensed features switch off: single sign-on, OIDC token exchange, replication, webhooks and notifications, quotas, branding and the importers. Repositories, artifacts and the security layer keep working. Local sign-in is always available as the break-glass path, and repositories you imported stay readable. Only new import jobs need a licence.

How is OrbitalReg licensed? Per user?

Never per user. You pay per deployment, in cluster licences: Commercial and Long-term Partner include three (typically dev, main and prod). Within a licence you can add clusters, regions and replicas without per-instance fees, and there are no per-environment or per-replica charges.

What is the Design Partner programme?

A limited cohort of teams that get full-featured access on one cluster licence for €100 a year. In return they join regular feedback calls, share use cases, beta-test new features and give a public quote after the trial. Graduation to Commercial after year one is optional.

Can prices go up at renewal?

Not on Long-term Partner: you commit to three years, the price you sign for is locked for the term, and renewing at the same cap is your option, never ours. Commercial is quoted as a year-one entry price; if you need a multi-year guarantee, Long-term Partner is the tier for it.

Which features need a licence and which are free?

The security layer is free in every state: advisory matching and SBOMs, Trivy and Grype per project, the pull-gate including Rego policies, signature verification, security blocks, licence policies, the audit log and air-gapped mode. A licence (or the trial) adds single sign-on, OIDC token exchange, replication, webhooks and notifications, quotas, branding and the migration importers.

How does this compare to JFrog Artifactory pricing?

OrbitalReg is priced per deployment and never per user, and the scanning and pull-gate that JFrog sells as Xray and Curation are part of the free version. The JFrog Artifactory pricing page on this site puts JFrog's published tiers next to these numbers.

Related: JFrog Artifactory pricing, side by side · JFrog Xray & Curation alternative · Sonatype Nexus alternative · Migration · EULA

Free forever · no contract

Start free. Decide later.

Install OrbitalReg in your own cluster, run the 30-day trial with everything on, and keep the security layer whether you buy or not.