FAQ
Frequently asked questions
Can’t find an answer? Contact the Qualipr team.
What does the Qualipr Application Security Suite include?
Qualipr is an Application Security Suite organized into six modules: Code Security & Quality, Supply Chain Security, Infrastructure Security, Application Testing, Risk & Compliance, and Platform Operations. Together they cover SAST, code quality, directed static analysis, software composition analysis, SBOM, license governance, IaC, container, cloud and host security, DAST, vulnerability management, security review, quality profiles and gates, a compliance registry, scan orchestration, aggregated visibility, governance, and notifications. The Platform page explains each module.
Which plans include the Application Security Suite capabilities?
The Free plan covers SAST and Code Quality Analysis on the main branch. The other Application Security Suite capabilities are available from the Team plan and on Enterprise. Application Testing (DAST, web application testing, and API testing) remains a separate add-on.
What is the difference between SAST and DAST?
SAST (Static Application Security Testing) analyzes source code without running the application, so security and quality issues surface as code is written. DAST (Dynamic Application Security Testing) tests a running web application or API from the outside, the way an attacker sees it. The two complement each other.
What does the Free plan include?
The Free plan includes SAST and Code Quality Analysis for up to 50,000 LOC, up to 5 users, and the Shared Runner. Scans run on the main branch only. The other Application Security Suite capabilities are available from the Team plan.
Can the Free plan scan branches other than main?
No. The Free plan scans the main branch only. Scanning other branches is available on Team and Enterprise.
Does the Free plan support Merge Request scans?
No. The Free plan does not include Merge Request scans. Choose Team or Enterprise if you need to check changes before they are merged.
How is Team pricing calculated?
Team pricing is based on monthly LOC (lines of code) capacity, from IDR 434,000/month for 100K LOC up to IDR 16,080,000/month for 1.9M LOC. The Shared Runner is included. Needs above 1.9M LOC are handled through Enterprise.
Is DAST included in the SAST price?
No. DAST is a separate add-on with three plans, starting at IDR 299,000/month.
What is the difference between DAST Starter, Growth, and Scale?
Starter (IDR 299,000/month): 1 active target, 4 scans/month, up to 50 pages per scan. Growth (IDR 999,000/month): 5 active targets, 20 scans/month, up to 100 pages, authenticated scanning, API scanning, 2 concurrent scans, 90-day history. Scale (IDR 1,499,000/month): 10 active targets, 40 scans/month, up to 200 pages, advanced authentication, API scanning, 4 concurrent scans, 180-day history.
Is the Dedicated Runner required?
No. The Shared Runner is included in Free and Team. The Dedicated Runner is an optional add-on, and buying DAST does not require it.
Can the Dedicated Runner be used for both SAST and DAST?
Yes. The Dedicated Runner provides exclusive execution capacity for both SAST and DAST jobs.
How do I request a demo or the Enterprise plan?
Fill in the form on the Book a Demo or Contact page. The Qualipr team will get in touch to discuss your needs, capacity, and an Enterprise offer.