Cybersecurity · pricing
Syft pricing
Syft publishes 2 tiers. Below is each one, what it adds over the tier beneath it, and where the ladder stops being worth climbing for most people.
As of 31 August 2026, Syft pricing is free across 2 published tiers. Figures are the vendor's list prices as recorded on this page's last check; the vendor's site is the final word.
- Entry price
- Free
- Model
- Open source, no licence fee
- Tiers
- 2
- Free tier
- Yes
Syft plans, side by side
Every published tier in ascending order of price, with the number of features each one lists. An absence here means the record does not itemise it, not that the tier lacks it.
| Plan | Price | Features listed | Step up from the tier below |
|---|---|---|---|
| Syft | Free | 4 | Entry tier |
| Anchore Enterprise | On request | 3 | Priced on request |
What each tier adds
The set difference between each tier's feature list and the one beneath it. Where a tier lists nothing new, the vendor has either stopped repeating the inherited list or the tier raises limits rather than adding capability, the record does not distinguish the two, so this page does not either.
Syft
FreeThe entry tier. It covers apache-2.0, no usage limits, community support, grype available separately on the same terms.
Anchore Enterprise
On requestOver Syft, this tier adds:
- Policy enforcement and reporting
- Federal and commercial tiers
- Pricing not published, quoted on request
Where Syft stops being free
Syft, Free
- Apache-2.0
- No usage limits
- Community support
- Grype available separately on the same terms
No paid tier on record
Syft lists a free tier and no priced tier above it in the record we hold.
What the product covers
The full Syft feature record, grouped as the catalogue groups it. This is the product as a whole; the record does not map every feature onto a specific tier.
Other
- Multi-format output
- Broad ecosystem coverage
- Binary classifiers
- In-toto attestations
- Library and CLI
- Pairs with Grype
People bring Syft in for producing a bill of materials for a customer or regulator that requires one, feeding an inventory into a vulnerability scanner rather than scanning images directly, recording what shipped in a build so a future disclosure can be answered quickly, public sector work where an sbom is a contractual deliverable. If that is not the job you are buying for, the alternatives to Syft are worth a look before you commit to a tier.
How that compares in Cybersecurity
Too few cybersecurity tools in this directory publish a starting price to quote a meaningful median, so the table below is a like-for-like list rather than a ranking.
| Tool | Entry price | Model | Rated | Head to head |
|---|---|---|---|---|
| Syft (this page) | Free | Open source, no licence fee | - | |
| Hanwha Vision | On request | One-time purchase | - | vs Syft |
| BeyondTrust | On request | quote | - | vs Syft |
| Feedzai | On request | quote | - | vs Syft |
| IDnow | On request | quote | - | vs Syft |
| Eagle Eye Networks | On request | Per camera per month | - | vs Syft |
| iDenfy | On request | Per verification | - | vs Syft |
Ratings are aggregated from third-party sources and imported with each catalogue entry, they are not reviews hosted on Softwr. How each figure is used is set out on the Syft badges page.
Before you pay for Syft
Three things this page cannot tell you, and all three change the bill. The record carries a price and a billing period but not the unit - per-seat and flat-rate pricing are indistinguishable in this data, so a five-person team may be looking at five times the figure above. It carries no annual rate, so any discount for paying yearly is not something this page can quote. And it carries no trial length.
What it can tell you is the shape of the ladder: 2 tiers between Free and On request, with the jump itemised above. Because there is a free tier, the cheapest way to answer the rest is to use it before paying anything.
Syft runs on macos, linux, windows, docker, and is published by Anchore Inc of Santa Barbara, California, United States. The full record is on the Syft review, and the rest of the category is under best cybersecurity tools.
Syft pricing questions
- How much does Syft cost?
- Syft publishes 2 tiers, from Free for Syft up to On request for Anchore Enterprise. The entry tier costs nothing.
- Does Syft have a free plan?
- Yes. The Syft tier costs nothing and covers apache-2.0, no usage limits, community support.
- What is the difference between Syft and Anchore Enterprise on Syft?
- Anchore Enterprise costs On request against Free, and adds policy enforcement and reporting, federal and commercial tiers, pricing not published, quoted on request.
- Which cybersecurity tools can I use without paying?
- 1 of the 8 cybersecurity tools listed alongside Syft have a free tier: Google Authenticator.
- What am I actually paying for with Syft?
- The record lists 6 features across 1 area: other. In practice it is brought in for producing a bill of materials for a customer or regulator that requires one, feeding an inventory into a vulnerability scanner rather than scanning images directly, recording what shipped in a build so a future disclosure can be answered quickly.
- Does Syft charge per user?
- The record carries a price and a billing period for each of its 2 tiers, but not the unit that price is charged in. Per-seat and flat-rate billing look identical in this data, so check the vendor's page before budgeting for a team.
- Are these Syft prices current?
- They are what the catalogue entry holds, refreshed when the entry is. Vendors change pricing without notice and nobody at Softwr re-verifies each tier by hand, so treat this as a structured summary and the vendor's own pricing page as the authority.
- What should I compare Syft against before paying?
- The closest cybersecurity tools in this directory are Hanwha Vision, BeyondTrust, Feedzai, IDnow. Each has a side-by-side comparison with Syft covering price, platforms and features.