Pricing
Pay for the gate, not the gigabytes.
Every tier ships rustdoc builds, crate site hosting, SBOMs, OIDC SSO, quarantine, and the gated crates.io mirror, all hosted in the EU. The paid tiers buy room and, on Compliance and up, the policy engine itself.
Free
€0
free, no card required
For open source communities and first trials.
- 3 public namespaces, 1 private
- Unlimited crates and members
- 5 GB public + 2 GB private storage
- 100 GB public + 10 GB private transfer / month
Team
€49
per month
For engineering orgs gating what they publish and what they consume.
- Unlimited namespaces
- 250 GB storage
- 1 TB transfer / month
- Metered overage, builds never break at a cap
Compliance
€199
per month
For teams with a CRA obligation to meet.
- Everything in Team
- 1 TB storage, 5 TB transfer / month
- Custom policies on the full engine
- Attestations, audit log export, CVD
Enterprise
Custom
quoted per deployment
For regulated and air-gapped environments.
- Everything in Compliance
- Physical isolation
- Self-hosted or on-premise
- SCIM, air-gap distribution, SLA
Every feature, every plan
| Feature | Free | Team | Compliance | Enterprise |
|---|---|---|---|---|
| Namespaces and quotas | ||||
| Public namespaces | 3 | Unlimited | Unlimited | Unlimited |
| Private namespaces | 1 | Unlimited | Unlimited | Unlimited |
| Crates and members | Unlimited | Unlimited | Unlimited | Unlimited |
| Storage | 5 GB public + 2 GB private | 250 GB | 1 TB | Custom |
| Transfer per month | 100 GB public + 10 GB private | 1 TB | 5 TB | Custom |
| Max crate file size | 10 MB | 100 MB | 100 MB | Custom |
| Overage | Hard limit | €0.10/GB storage, €5/TB transfer | €0.10/GB storage, €5/TB transfer | Custom |
| Publishing and policy | ||||
| Cargo sparse index and scoped tokens | ||||
| Trusted publishing, tokenless from CI | ||||
| Per-client read grants with semver ranges | ||||
| Predefined policy gates | ||||
| Quarantine on failed gates | ||||
| Custom policies on the full engine | — | — | ||
| Keyless CI attestations, m-of-n promotion | — | — | ||
| Dependencies | ||||
| crates.io mirror, gated by your rules | ||||
| Predefined admission gates: advisories, yanked upstream, cooldown | ||||
| Custom admission rules and org-wide pins | — | — | ||
| Air-gapped mirror sync | — | — | — | |
| Docs and distribution | ||||
| Rustdoc builds | ||||
| Crate website hosting | ||||
| CycloneDX SBOMs and license reports | ||||
| Security and compliance | ||||
| OIDC SSO | ||||
| RustSec advisory alerts on crates and dependencies | ||||
| Malicious crate reporting and takedown | ||||
| Tamper-evident audit log | ||||
| Audit log retention | 30 days | 90 days | Unlimited | Unlimited |
| Audit log export | — | — | ||
| Coordinated vulnerability disclosure channel | — | — | ||
| SCIM provisioning | — | — | — | |
| Deployment and support | ||||
| Deployment | Shared | Shared | Shared | Physically isolated, self-hosted, or on-premise |
| Air-gap distribution | — | — | — | |
| Support | Community | Priority | Dedicated, with SLA | |
Quotas on Free are hard limits, split between public and private namespaces so an open source project is never throttled by someone else's trial. Paid tiers meter overage instead of stopping builds. Dependency mirror traffic counts toward monthly transfer. Running a large open source project? Talk to us, hosting the commons is part of the point.
First cargo publish in five minutes.