Softwr

Cybersecurity · head to head

Arnica vs Trimble Unity Maintain

Arnica logo

Arnica

Cybersecurity

AI-native application security platform detecting and fixing vulnerabilities across the SDLC

From
Free
Free plan
Yes
Full reviewWebsite
Trimble Unity Maintain logo

Trimble Unity Maintain

Government

GIS-centric public asset and work management, the product formerly sold as Cityworks

From
On request
Free plan
No
Full reviewWebsite

The short version

  • Only Arnica has a free tier, so it costs nothing to try first.
  • Each has a real cost: Arnica per-identity pricing ($25-$50/person/year) requires tracking active developers; Trimble Unity Maintain esri ArcGIS is a hard prerequisite, so an organisation without it faces a second substantial licence and a GIS programme before the maintenance system can be used at all.
  • They diverge on capability: Arnica covers AI SAST, Trimble Unity Maintain covers Built on ArcGIS.
  • Prices and features above were last checked on 1 September 2026.

Where they differ

Only the attributes on which Arnica and Trimble Unity Maintain actually diverge.

Attributes where Arnica and Trimble Unity Maintain differ
AttributeArnicaTrimble Unity Maintain
Starting priceFreeOn request
Pricing modelPer-identity subscription with annual discountquote
Free tierYesNo
PlatformsWeb, GitHub, IDEWeb, iOS, Android, Windows
CategoryCybersecurityGovernment

Identical on both: user rating (Not yet rated).

What each one covers

Drawn from each product's published feature list. An absence here means we hold no record of it - not that the product lacks it.

Only in Arnica

  • AI SAST
  • Software Composition Analysis
  • Secrets detection
  • IaC scanning
  • Container scanning
  • SBOM generation
  • Agentic rules
  • Pipelineless integration

Only in Trimble Unity Maintain

  • Built on ArcGIS
  • Service requests
  • Work order management
  • Permits and licensing
  • Mobile field access
  • Storeroom and inventory
  • Operational Insights
  • AgileAssets convergence

What people use each for

The jobs each tool is most often brought in to do.

Arnica

  • Detecting AI-generated vulnerabilities in Copilot and Cursor suggestionsnot Trimble Unity Maintain
  • Finding hardcoded secrets before they reach productionnot Trimble Unity Maintain
  • Mapping container vulnerabilities back to source codenot Trimble Unity Maintain
  • Generating SBOM for supply chain compliance requirementsnot Trimble Unity Maintain
  • Scanning infrastructure-as-code for misconfiguration risksnot Trimble Unity Maintain

Trimble Unity Maintain

  • A water utility wanting valve exercising and hydrant flushing recorded against the same GIS features the engineering team maintainsnot Arnica
  • A city consolidating a citizen service request line, work orders and inspections into one location-based systemnot Arnica
  • A state transportation department managing pavement and bridge assets with linear referencing rather than point assetsnot Arnica
  • A public works department that has already licensed ArcGIS Enterprise and wants to avoid rekeying its asset inventorynot Arnica

Where each one falls short

Documented limitations, not opinions. Every one is a constraint you would hit in normal use.

Arnica

  • Per-identity pricing ($25-$50/person/year) requires tracking active developers
  • Overage identity tracking via 90-day PR activity can be unpredictable
  • Free plan limited to weekly updates, requiring upgrade for real-time scanning
  • Advanced add-ons (Image Scanning, AI SAST, Agentic Rules Enforcer) pricing not published
  • On-premises deployment limited to Enterprise tier

Trimble Unity Maintain

  • Esri ArcGIS is a hard prerequisite, so an organisation without it faces a second substantial licence and a GIS programme before the maintenance system can be used at all.
  • The product is mid-rename from Cityworks to Trimble Unity Maintain with transition timelines Trimble has not committed to publicly, leaving contracts, documentation and integrator experience split between two names.
  • CVE-2025-0994, a deserialisation flaw in Cityworks, was exploited in the wild and listed by CISA in February 2025, which makes on-premise deployments a patching obligation rather than a set-and-forget install.
  • Because assets live in the GIS, changing the asset model is a GIS division change, so maintenance teams cannot restructure their own hierarchy without another department in the loop.
  • It is built for North American public sector practice, and the permitting, funding source and reporting models do not map cleanly onto other countries or onto private industrial estates.

Pricing, plan by plan

Arnica

Free
  • FreeFree
    • No credit card required
    • 14-day trial available
    • Weekly risk identification updates
  • Core Business$360/year
    • Monthly billing option at $30/identity/month
    • Annual billing at $25/identity/month (17% discount)
    • Real-time risk scanning and notifications
  • Core Enterprise$720/year
    • Monthly billing option at $60/identity/month
    • Annual billing at $50/identity/month (17% discount)
    • All Core Business features

Trimble Unity Maintain

On request
  • Trimble Unity Maintain$undefined/year
    • Annual subscription sized by population served, asset volume and user count
    • Esri ArcGIS Enterprise or ArcGIS Online licensing required separately
    • Hosted and on-premise deployment priced differently

Which should you pick?

Choose Arnica if

  • You need ai sast.
  • You want to start without paying.
  • You work on Web, GitHub, IDE.
  • You also want software composition analysis.
Arnica review

Choose Trimble Unity Maintain if

  • You need built on arcgis.
  • You work on Web, iOS, Android, Windows.
  • You also want service requests.
Trimble Unity Maintain review

Questions people ask

Is Arnica or Trimble Unity Maintain better?
Neither clearly leads. Arnica starts at Free and Trimble Unity Maintain at On request, and user ratings are close enough to be indistinguishable. Choose on capability and platform support.
Which is cheaper, Arnica or Trimble Unity Maintain?
Arnica has a free tier; the other does not. Paid plans start at Free for Arnica and On request for Trimble Unity Maintain.
Does Arnica or Trimble Unity Maintain run on more platforms?
Arnica runs on Web, GitHub, IDE. Trimble Unity Maintain runs on Web, iOS, Android, Windows.
Can I use Arnica for free?
Yes. Arnica has a free tier, so you can try it without paying. Trimble Unity Maintain starts at On request.
What is Arnica best used for?
Arnica is most often used for detecting ai-generated vulnerabilities in copilot and cursor suggestions, finding hardcoded secrets before they reach production, mapping container vulnerabilities back to source code, generating sbom for supply chain compliance requirements. Of those, detecting ai-generated vulnerabilities in copilot and cursor suggestions and finding hardcoded secrets before they reach production are not what Trimble Unity Maintain is typically brought in for.
What can Arnica do that Trimble Unity Maintain cannot?
Arnica covers AI SAST, Software Composition Analysis, Secrets detection, IaC scanning. Trimble Unity Maintain covers Built on ArcGIS, Service requests, Work order management, Permits and licensing.

Answered from the vendors’ own pages

Arnica: How are identities defined in Arnica pricing?

Identities are any users and other contributing entities that contributed code and/or had PR activity during the last 90 days. This ensures billing matches active developers.

Source
Trimble Unity Maintain: Is Cityworks discontinued?

Not discontinued, renamed. It is becoming Trimble Unity Maintain, converging with AgileAssets, and Trimble has not published a final transition date.

Arnica: What is the annual discount?

Annual prepayment offers approximately 17% savings versus monthly billing. Core Business annual is $300/identity versus $360 for monthly.

Source
Trimble Unity Maintain: Do I need Esri ArcGIS?

Yes. The product is built on ArcGIS and cannot be deployed without an Esri licence.

Arnica: Can I cancel or downgrade Arnica anytime?

Yes. Subscriptions can be cancelled or downgraded at any time. Overage identities receive automatic protection with true-up invoicing.

Source
Trimble Unity Maintain: Was there a security incident?

Yes. CVE-2025-0994 in Cityworks was exploited in the wild and added to the CISA known exploited vulnerabilities catalogue in February 2025.

Trimble Unity Maintain: Can it handle roads and pavement as well as pipes?

Yes, through the AgileAssets lineage now inside the Unity Maintain family, which adds linear referencing for transportation assets.

Share

Related pages

More on Arnica

More on Trimble Unity Maintain

Keep looking

Other head to heads