Simple pricing for evidence-backed releases
Open-core orchestrates and records. Business Edition answers: may this release proceed? — with real disk evidence, not path placeholders. One license, unlimited use.
Open-Core
Full release spine for teams that need manifests and supply-chain evidence without a hosted platform.
- Immutable release manifests (SSoT)
- SBOM generation (Syft)
- Vulnerability scanning (Trivy) + --fail-on
- Image signing orchestration (Cosign)
- rflow release workflow spine
- Control-plane bootstrap (ADO/GitHub/GitLab)
- External evidence storage (S3/Azure/on-prem)
- Local GUI + doctor
- Community support
Business Edition
Evidence-backed policy gates, verify, and promote approvals — offline-capable Ed25519 license.
Best value — save vs paying monthly ($2,988/year).
- Everything in Open-Core
- Offline Ed25519 cryptographic license
- policy gates: requireScan / requireSbom / signatures
- failOnSeverities + CVE allowlists
- rflow verify (licensed policy surface)
- Promote with RFLOW_APPROVAL_TOKEN
- External ref materialization in gates
- AI remediation notes (where configured)
- Priority support
Roadmap (not required for purchase value today): compliance report bundles, CRA audit pack, custom policy-as-code — see roadmap.
How rflow compares
Few tools combine release orchestration, supply-chain evidence, and local-first delivery in a single local binary — without platform lock-in.
We compare primary product focus (native, first-class support), not every optional plugin or DIY CI script. Snapshot as of 2026-07; competitor packaging changes over time.
| Capability | semantic-releasesem-rel | GoReleaserGoRel | JFrog RLCJFrog | SnykSnyk | Harness CDHarness | rflowrflow |
|---|---|---|---|---|---|---|
| BE | ||||||
| N/A |
Compare editions
| Capability | Open-Core | Business |
|---|---|---|
| — | ||
| — | ||
| — | ||
| — | ||
| — | Roadmap |