Pricing
Free to run. Pro when your organisation needs it.
The open-source edition is complete on its own and has no licence checks. Pro adds what larger teams ask for.
Open source
Kresheen
$0 Apache-2.0
Everything you need to model, analyse and track your systems, on your own hardware.
- Ingest Kubernetes, Terraform, GitHub repositories and diagram files
- Editable data flow diagrams with trust boundaries
- STRIDE threats for every element, plus custom threats
- A starter set of Kubernetes and AWS misconfiguration checks
- Risk scoring, attack paths, completeness check and action plan
- Run history, diffs, staleness and trends
- CI gate and GitHub Action
- PDF, Word, HTML, CSV, SARIF and diagram exports
- Local users, shared groups and an audit log
For organisations
Kresheen Pro
Coming soon
Everything in the open-source edition, plus:
- An extended threat knowledge base, including the full set of Kubernetes and AWS misconfiguration checks
- Extended methodology coverage beyond STRIDE
- Single sign-on (OIDC), SCIM provisioning, group-to-role mapping and SSO-only mode
- Restricted groups with viewer, editor and admin roles
- Reviewed guidance with verification steps and example fixes
- A Jira connector
- A portfolio dashboard across every model
- Audit streaming to your SIEM and longer retention
- Compliance mapping, coming after expert review
Pro will be a licensed plugin you install next to the open-source edition, running on your own hardware too.
Services
Want a hand getting started?
The people who built Kresheen can help you set it up and get real value from your first models.
Threat model review
We model one of your systems with you, triage the results, and walk your team through the fixes that matter most.
Onboarding
Installation on your infrastructure, connecting your repositories and a CI gate on your main pipelines.
Pro support
Once Pro is available: a direct line to the maintainers for Pro customers, with help on upgrades, custom rules and integrations.
Questions
Is the open-source edition limited?
No. It has no user limits, no model limits and no licence checks. Pro features live in a separate plugin, so nothing in the open-source code is switched off.
Does my data leave my network?
No. Kresheen runs on your hardware. It only reaches out when you connect a GitHub repository or turn on the optional AI assist with your own key.
Does it use AI to find threats?
No. Analysis is rule-based, so the same input always gives the same threats. The optional AI assist can draft intake answers and explain a threat, but it never writes threats or findings.
What does it need to run?
Docker with Compose for a single machine, or Kubernetes with the Helm chart. It stores data in SQLite or PostgreSQL.
How do I get Pro?
Pro is coming soon. Email support@peckacyber.com to hear when it is available, or to talk about enterprise use.