Skip to content
Pricing · Apache-2.0

Free forever when you
self-host.

Blackfyre is open source. The whole platform — 55 auditors, 9 frameworks, 678 controls, the evidence vault, everything — is free to run on your own infrastructure, with no seats and no feature gates. Prefer we run it? A managed hosted option is in early access.

Star on GitHubQuickstart

What $0 gets you

$0

Self-host

55

Auditors

9

Frameworks

Apache-2.0

Licence

Choose your path

Run it yourself, or let us run it.

Two ways to get Blackfyre. Same open-source core, same 678 controls — you decide who operates the infrastructure.

Free forever
Self-host
$0/ forever

Apache-2.0. Clone it, run it on your own infrastructure, keep every feature — no seats, no gates, no expiry.

  • All 55 auditors across AWS, Azure, GCP + on-prem
  • All 9 frameworks · 678 controls, weighted per-framework scoring
  • Deploy to your own AWS via SST (Lambda / RDS / SQS / S3)
  • Full source — read it, fork it, extend it, self-audit it
  • Community support via GitHub Issues & Discussions
  • Bring your own AI: Anthropic API key or AWS Bedrock IAM role

Local evaluation runs on Docker Compose with no cloud account or API keys.

QuickstartView source
Early access
Hosted option
Contact us

We run the AWS backend for you at blackfyre.tech — managed infrastructure, upgrades and enterprise support on the same open-source core.

  • Managed infrastructure & upgrades — we operate the AWS backend
  • Enterprise SSO / SAML / SCIM configured for you
  • Auditor access for external assessors
  • Priority support
  • Everything in Self-host — same open-source platform

Managed cloud is not live yet — pricing and SLAs are set during early access.

Get early accessTalk to us
Compare

Self-host vs. hosted, side by side.

Every capability ships in both. The only difference is who runs the AWS backend and configures the enterprise plumbing.

CapabilitySelf-hostHosted
Price$0 foreverContact us
All 55 auditors (AWS / Azure / GCP + on-prem)
9 frameworks · 678 controls
Tamper-evident evidence vault
Database-enforced multi-tenancy (RLS)
Enterprise SSO / SAML / SCIMSelf-configuredManaged for you
AI-assisted analysisYour key / BedrockIncluded
Runs onYour AWSOur AWS
Infrastructure & upgradesYou operateManaged
SupportCommunity (GitHub)Priority
Full source (Apache-2.0)
FAQ

Questions, answered honestly.

No dark patterns. If the managed cloud isn't live yet, we say so.

Is self-host really full-featured?

Yes. Self-host is the complete product — all 55 auditors, all 9 frameworks and 678 controls, the tamper-evident evidence vault, RLS multi-tenancy and enterprise auth. Apache-2.0 means it's free forever with no feature gates or seat limits.

What does the hosted option add?

Managed operations. We run and upgrade the AWS backend, configure enterprise SSO / SAML / SCIM for you, provide auditor access and offer priority support. The core is the same open-source Blackfyre you can run yourself.

Do I need an AI API key?

No. AI-assisted analysis is optional: supply an Anthropic API key or use AWS Bedrock via a Lambda IAM role (no key). With nothing configured, those features degrade gracefully to deterministic heuristics.

What does self-host cost to run on AWS?

The software is free — you pay only your own AWS bill. As a rough guide that's about $56/mo idle for a staging stage and ~$80/mo for a multi-AZ production stage. Local evaluation via Docker Compose is $0.

Is the managed hosted cloud live yet?

Not yet. Managed hosting is in early access with no public pricing or SLAs. Self-host — local or on your own AWS — is fully available today.

Start

Free forever, or fully managed.

Self-host the whole platform at no cost, or join the early-access list for managed hosting on our AWS backend.

Star on GitHubGet the quickstart
$0 forever55 auditors678 controlsApache-2.0