Got questions? We got answers.

Everything you want to know before adding another tool to your stack.

Product

How do I get started?
Sign in at app.octokraft.com with your GitHub account, connect your repos, and you'll have your first health score in minutes. Plans start at $50/mo.
What GitHub permissions does Octokraft need?
Read access to the repos you connect and write access only for posting review comments. Permissions are scoped per repo, fully auditable, and revocable from your GitHub settings at any time.
Do you support GitLab or Bitbucket?
GitHub only at launch. GitLab and Bitbucket are on the roadmap. If you need them, tell us. It helps us prioritize.

Pricing

How are PR reviews counted?
Unique PRs analyzed per billing period, deduplicated by repo and PR number. Failed analyses don't count against your limit.
What counts as a project?
A project is a workspace that groups related repositories, team members, and settings. For example, a microservices backend and its frontend could share one project. Indie plans include 2 projects; Pro and Enterprise are unlimited.
How do seats work on Pro?
Pro starts at $50/mo base plus $25 per seat, with a minimum of 3 seats. That's $125/mo minimum (base + 3 seats). Each seat gets 100 PR reviews per month. Add more seats anytime at $25/seat/mo.
Who needs a seat?
Every member of your billing team. The team owner's subscription covers all members.
What happens when I hit a limit?
New PR analyses and project creation are blocked. Existing projects keep working. Upgrade anytime via the billing portal.
Can I use my own AI models?
Yes. BYOK is available on all plans. Provide any Anthropic-compatible model endpoint and API key, and Octokraft will use it instead of the default models. You get 4 configurable model slots with task-to-model routing — use a fast model for triage and a stronger model for architecture review.

Data & Privacy

Does Octokraft clone my repository?
Yes. Octokraft performs a shallow git clone to analyze your code. Clones are temporary — created in an isolated directory, used for analysis, and deleted immediately after. The bulk of what's stored is a structured knowledge graph of symbols, dependencies, and relationships. Small code snippets (a few lines each) are kept alongside detected issues to show you exactly what was flagged. Code diffs for PR reviews are fetched on-demand from GitHub and not stored.
What AI models are used?
We use Anthropic-compatible open source models hosted on Ollama Cloud. The specific models may change as we evaluate performance. If you have a preference, you can use the BYOK feature to bring any Anthropic-compatible model.
Is my code sent to third-party AI providers?
On the cloud plan, code snippets are sent to open source models hosted on Ollama Cloud for analysis. Your code is not sent to OpenAI, Anthropic, or any other large AI provider. We plan to move to self-hosted models on infrastructure we fully control in the future. With BYOK, you choose exactly where your code goes.
Where is my data stored?
Octokraft's cloud infrastructure runs on Hetzner Cloud in Germany. All data — analysis results, health scores, and metadata — is stored in the EU. Source code is never persisted; only structured analysis results are kept.
What data is retained, and for how long?
Analysis results (health scores, detected issues, conventions, architecture dimensions) are stored for the lifetime of your project. Repository clones are ephemeral and deleted immediately after analysis. Deleting a project permanently removes all associated data. Removing a repository from a project does not delete its analysis history.
Is my code used for training?
No. Your code is never used to train or fine-tune any model. We use open source models hosted on infrastructure we control, and no training pipelines exist in Octokraft.

Security & Isolation

How are analysis jobs isolated?
Each analysis runs in a sandboxed Docker container with read-only access to the repository and no network access. Containers are destroyed after every run. On Kubernetes deployments, each analysis runs as an isolated Job with its own pod. No analysis job can access another project's data or reach external services.
How is my data protected?
Encrypted in transit (TLS) and at rest. Stored credentials — GitHub tokens and BYOK API keys — are encrypted with AES-256-GCM. API keys are stored as SHA-256 hashes, never in plaintext.
Can Octokraft access private repositories?
Only the repos you explicitly connect. You choose which repos to analyze and you can revoke access from GitHub at any time. No blanket org-level access.
Do you have SOC 2 certification?
Not yet. We're an early-stage product and SOC 2 is on our roadmap. If compliance certification is a requirement, our Enterprise self-hosted option lets you run Octokraft inside your own audited infrastructure.
Do you offer self-hosted deployment?
Yes. Enterprise plans include self-hosted options via Docker Compose or Kubernetes with Helm charts. Run Octokraft inside your own infrastructure — your code and data never leave your network.

Still have questions?

Can't find what you're looking for? We respond to every message.

Contact us

Ready to try Octokraft?

Plans start at $50/mo. Get your first health score in minutes.

Sign In and Try