- Weekly rule updates
- Unlimited local runs
- 1,000 Beamline queries / hour
For maintainers, researchers, and non-commercial tools.
Start on Community →Catch the malware no one has a signature for.
atomdrift judges code by what it does, not by whether anyone has seen it before — source, binaries, containers, packages. In the lab it catches 67% of zero-day malware; the next best engine, 33%. Enriched is the subscription: new rules the hour they clear QA, a hosted API, and the engineers who wrote it on the other end of the email. Business from $499/mo.
Pricing
Simple pricing. Clear rights.
Every tier runs the same Apache-2.0 engine, locally and without limit. What you pay for is how fast rules reach you, how hard you can hit Beamline, and the right to ship it inside what you sell. Your rate stays fixed for as long as you subscribe.
- Hourly rule updates
- Unlimited local runs
- 10,000 Beamline queries / hour
For internal security, CI gates, and developer workflows.
Start with Business →- Hourly rule updates
- Unlimited local runs
- 100,000 Beamline queries / hour
For commercial products and embedded integrations, with the right to ship the rules inside what you sell.
Start with OEM →A week is a long time in a registry.
Malicious packages are often pulled within hours of publication; the builds that already consumed them are not. Open-source rulesets ship weekly. Subscribers get each rule the hour it clears QA — you are paying for the week, not the rule, and funding the release everyone else gets.
Hosted or air-gapped. Same engine, same verdict.
Beamline puts atomdrift behind one HTTP call for CI gates, registries, IDEs, and security products: send a PURL, a SHA-256, or the artifact itself. When code cannot leave the building, run the same engine locally — as a CLI, a service, or Rust libraries — with nothing depending on a network, or on us.
Every verdict is deterministic and explainable: a hostile finding names the rule, file, byte offset, source line, and behavior behind it. Pin tool, rule, and model versions and the scan is reproducible.
API documentation →The people who wrote it answer the email.
Business and OEM include support for Scan, Isomer, Cleave, and their APIs: patches, upgrades, and integration help from the maintainers, not a tier. An engineer replies by the next business day.
Pick a tier. Send one email.
No deck, no discovery call. Or start on Community today and upgrade when it has earned it.
[email protected]