Pricing

One plan per team. All four engines in every plan.

No engine sold separately and no sales call to learn the price. Pick the plan by the size of your team and you are done.

Prices in US dollars. Local taxes are calculated at checkout based on your billing country.

Starter

For small teams starting to review security on every change.

$149 $119 / month

Billed every month. Cancel anytime. Billed yearly: $1,428. You save 20%.

Start free trial

5 active devs
500 scans a month
Unlimited repositories

All four engines: SAST, SCA, IaC and Secret Scanning
Pull request scan and full-repository scan
GitHub, GitLab, Azure DevOps and Bitbucket
Support in Spanish and English

Recommended

Team

For growing teams that export findings and audit who did what.

$499 $399 / month

Billed every month. Cancel anytime. Billed yearly: $4,788. You save 20%.

Start free trial

25 active devs
5,000 scans a month
Unlimited repositories

Everything in Starter, plus

Export findings to CSV and JSON
Export the audit log
Trends and metrics on the dashboard
Priority support and guaranteed uptime

Business

For organizations with compliance requirements and external audits.

$1,299 $1,039 / month

Billed every month. Cancel anytime. Billed yearly: $12,468. You save 20%.

Start free trial

100 active devs
Unlimited scans a month
Unlimited repositories

Everything in Team, plus

SOC 2 evidence report
Data processing agreement (DPA)
Custom data retention
4-hour response and 99.9% uptime

Enterprise

For large organizations with a contract, invoicing and single sign-on.

Custom Annual contract. Invoice at 30 or 60 days.

Talk to us

Unlimited active devs
Unlimited scans a month
Unlimited repositories

Everything in Business, plus

Single sign-on (SAML) and SCIM
Custom contract: MSA, DPA, NDA
Service level agreement with credits
A dedicated point of contact

The full comparison, row by row, is further down this page.

Free trial

14 days, no card.

Team: 2 active developers
Scans: 50 during the trial
Platform: GitHub
Engines: All four

One trial per email domain. When it ends, you pick a plan or the account becomes read-only for 30 days and is then deleted with its data. We never charge you unless you ask.

Full comparison

What changes between plans, row by row.

Feature	Starter	Team	Business	Enterprise
Limits
Active developers	5	25	100	Unlimited
Scans a month	500	5,000	Unlimited	Unlimited
Repositories	Unlimited	Unlimited	Unlimited	Unlimited
Engines
SAST: source code	Yes	Yes	Yes	Yes
SCA: dependencies	Yes	Yes	Yes	Yes
IaC: infrastructure	Yes	Yes	Yes	Yes
Secret Scanning: secrets	Yes	Yes	Yes	Yes
Platforms
GitHub, GitLab, Azure DevOps, Bitbucket	Yes	Yes	Yes	Yes
Pull request scan and full-repository scan	Yes	Yes	Yes	Yes
Reporting and compliance
Export findings (CSV, JSON)	No	Yes	Yes	Yes
Audit log	View	View and export	View and export	View and export
Trends and metrics on the dashboard	No	Yes	Yes	Yes
SOC 2 evidence report	No	No	Yes	Yes
Data processing agreement (DPA)	No	No	Yes	Yes
Custom data retention	No	No	Yes	Yes
Support and uptime
Response time	24 to 48 h	12 h	4 h	1 h
Guaranteed uptime	Best effort	99.5%	99.9%	99.95% with credits
Support languages	Spanish and English	Spanish and English	Spanish and English	Spanish and English
Enterprise
Single sign-on (SAML) and SCIM	No	No	No	Yes
Invoice at 30 or 60 days	No	No	No	Yes
Custom contract (MSA, NDA)	No	No	No	Yes
Dedicated point of contact	No	No	No	Yes

Frequently asked

What teams ask before choosing.

If your question is not here, write to [email protected] and a person answers, not a form.

What happens if I go over the monthly scans?: We warn you at 80% and at 100%. When you hit the limit you get 3 days of grace to keep scanning as usual. If by day four you have not changed plan, we pause new scans until the next cycle. We never charge for extra scans: if you need more, the path is moving up a plan, not a surprise invoice.
How are active developers counted?: An active developer is a member of your organization with activity in Musha in the last 30 days. If you have 30 people registered and 12 active, 12 count toward your plan limit.
Do I need a card for the trial?: No. You sign up with your corporate email and get 14 days with all four engines. We only ask for a card when you choose a plan. Personal emails (Gmail, Outlook and the like) cannot sign up: Musha is sold to companies.
Can I change plan mid-month?: Moving up: yes, anytime, and you pay only the difference for the remaining days. Moving down: yes, but it applies at the start of the next cycle. We do not refund the difference for the current month.
Can I cancel anytime?: Yes. On a monthly plan, service continues until the end of the paid month. On an annual plan, until the end of the paid year, and if you cancel within the first 30 days of the annual charge we refund the full amount, subject to fair use.
Which payment methods do you accept?: Starter, Team and Business are paid by credit or debit card (Visa, Mastercard, American Express and local methods in some countries) through our payment processor. Enterprise is invoiced at 30 or 60 days by bank transfer or corporate card.
Is there a setup fee?: No. The plan price is the total price. No activation or implementation charge.
Do you offer a discount for nonprofits or universities?: Yes, 50% on any plan. Write to [email protected] with a document that proves the status.
Do you sign a DPA or provide a SOC 2 report?: The data processing agreement is available from Business. The SOC 2 evidence report also comes with Business: a structured report of your vulnerability management for your auditors.

Start today. Decide with your team in 14 days.

One job in your CI and Musha reviews the next pull request. No card, no sales call.

Start free trial See how it works