Rampart
Security findings your engineers can merge.
Rampart runs the checks on every push and pull request. A finding arrives as a fix pull request with the evidence in it.
01
From connected to gated
- 01
Connect
Authorise the org, pick repositories, choose protected branches.
- 02
Scan
Every check runs on each push and pull request. No schedule to remember.
- 03
Review
A finding opens a fix pull request your engineers read and decide on.
- 04
Gate
Policies make a class of finding a required check, not a reminder.
02
What runs, and what it does about it
| Check | What it does | Default |
|---|---|---|
| Dependencies | Advisories from OSV.dev, matched against the resolved lockfile. | Blocks when a fix exists |
| Code | Pattern and regex rules across the code that ships. | Reported per file and line |
| Secrets | Entropy and pattern detection, matched in place. | Blocks on high confidence |
| Infrastructure | Dockerfile, Terraform, Kubernetes, Actions. | Reported per definition |
| Containers | OCI manifest and configuration. Layers never pulled. | Reported per image |
03
How it is charged
Metered on what the engines read: change size, repositories, and re-checks. No seat count, no per-finding surcharge. Rampart and Bolt share one balance.
04
Plans that scale with repositories
Start free on your own repositories. Move up when the scan volume or the team grows — every tier bills the same shared token balance for what it scans.
3 repositories
- Dependency + secret scanning
- Production Security Gate (preset)
- Connect GitHub repositories
- Community support
25 repositories
- Full scan suite. SAST, IaC, containers
- PR checks on every pull request
- Up to 10 teams
- Role-based member invites
200 repositories
- Custom merge-gate policies
- Audit log
- Reports
- Up to 50 teams
1,000 repositories
- SSO via OIDC. Okta, Entra, Auth0, Keycloak
- Advanced RBAC
- Scheduled reports
- Dedicated support
Per organization per month · billed automatically via Nylon Pay in UGX · plan activates the second payment verifies · cancel anytime, holds until period end