Iris Code
FeaturesPlaygroundMCPTeamsPricingDocs
Get Iris Code Free
Sign inGet Iris Code Free
Pricing

Choose how far the standard needs to reach.

Use Free for file analysis and core agent guidance. Choose Pro for workspace checks, enforcement, dependency intelligence, and cloud scans. Choose Teams when the organisation needs shared control and evidence.
Editor
analysis runs in-process
Network
account, lookups, and events
Cloud scans
opt-in, per repository
Freeno account
$0/ month

Forever. Measurement is not the paid part.

Install free

No credit card, no sign-in

Included in Free

  • Health score out of 100, on every save
  • Cyclomatic complexity per function
  • Function inventory with exact line numbers
  • TypeScript-specific type-safety metrics
  • Code smells: debug output, magic numbers, TODOs, unused vars
  • Health score trend tracking (2 snapshots)
  • Hardcoded secrets, with the value masked in every report
  • eval and exec usage
  • SQL built by string concatenation
  • Insecure randomness and weak hashing
  • Duplicate block matching across the file
  • Package guard: every package checked before it installs, for known vulnerabilities, malicious reports, and yanked or brand-new versions
  • Inline diagnostics: squiggles and the Problems panel
  • Status bar score and Code Lens
  • Detached panel
  • Whole-schema structure, focused-table usage and exports
  • Shareable report from your saved first workspace scan: a card or PDF
  • VS Code, Cursor, Windsurf, VSCodium, Trae, and JetBrains IDEs
  • .irisconfig.json preset configs (presetId)
  • Gate Preview - read-only pass/fail against the built-in presets
  • Project rules written into AGENTS.md, CLAUDE.md, Cursor, or Copilot
  • MCP server on one file: findings, resolved config, safe fixes, refactor plans, and package checks
  • Safe mechanical fixes as an editor Quick Fix, with a reason on every refusal
  • Refactor plan and verification for one file, in the editor, the CLI and MCP
  • Agent hooks that check packages before Claude Code, Cursor, Codex, Copilot, Gemini CLI, or Windsurf installs them
  • iris init - set the project up: preset, config, agent rules, hook
  • iris schema - schema structure and one table's usage
  • iris auth - sign in from the terminal
  • iris check - single-file health scan
  • iris graph - one file's imports and importers
  • iris fix --safe - remove findings on one file that are provably safe to remove
  • iris refactor - a refactor plan for one file, and --verify to check the result
  • iris secrets - credential scanner, no auth required
  • iris security - eval, SQL injection, weak hashing, no auth required
  • iris rules - write project rules for coding agents
  • iris install - check packages before they install, or a whole cloned project before its install scripts run
  • iris remove - remove packages with the project's package manager
  • iris slack - set up and test scan notifications
  • iris mcp - file tools, project config and package checks for coding agents
  • iris report - an HTML report, or a shareable card or PDF
  • iris hook status, iris config init and validate
Promost popular
$6/ month

Enforcement: the half that can stop a push.

Start free trial

14-day trial by request, no card - includes 50 cloud scans a month

Everything in Free, plus:

  • Connect a GitHub repository and it is scanned without your editor open
  • 50 scans a month - every scan spends one, however it started
  • Choose the trigger per repository: merges, pull requests, or both
  • Every finding opens at its line on GitHub
  • Dependency and CVE audit against the audited commit
  • Commit-specific reports, with score history and trends
  • Personal activity and audit history across connected repositories
  • Whole-workspace and per-folder scans
  • Aggregate schema usage and warnings
  • Gate Preview drilldown - exactly which files fail each preset
  • Findings tab with blocker and warning filters
  • TODOs tab aggregation
  • Clickable jump-to-line on every finding
  • Unlimited trend history and the trends table
  • Shareable reports from any fresh scan
  • Git pre-push hook
  • Build hook
  • Custom enforcement limits: secrets, complexity, file size, smells
  • Custom health score weights per finding type
  • Retention controls - regression threshold and baseline mode
  • Push-blocked counter, with the health delta since Pro started
  • Package guard on pushed lockfile changes
  • Dependency Audit with a version audit
  • CVE scan against OSV advisories across eight ecosystems
  • Nearest fixed version for every advisory
  • CycloneDX 1.5 SBOM export
  • Custom .irisconfig.json threshold overrides
  • Config Studio - build, preview, and sync to your editor
  • Per-language overrides
  • MCP at folder and workspace scope
  • Gate status: whether the configured gate would pass
  • Rule detail behind a finding, not just its label, with the limit, the measured value and the overage
  • Safe fixes across a folder or the whole workspace
  • Refactor plans for a folder or the whole workspace, in the editor and over MCP
  • Dependency risk for a package at its installed version
  • iris gate - full enforcement gate for CI
  • iris deps - dependency and CVE audit
  • iris cve - fail CI at or above a severity threshold
  • iris sbom - CycloneDX 1.5 export
  • iris todos - aggregate TODO and FIXME
  • iris hook install and uninstall
  • iris check - directory and staged file scans
Teamsorganisation
Per seat

One shared standard, and a record of who changed it.

Create a team

Billed monthly at your region's rate

Everything in Pro, for every member, plus:

  • 100 scans per seat a month, so the three-seat minimum has 300
  • One allowance, shared across every repository in the workspace
  • Triggers set per repository: merges, pull requests, or both
  • Each scan recorded against the policy version it ran under
  • One organisation-wide standard, committed beside the code
  • Built and previewed in the workspace Config Studio
  • Synced, so a new machine enforces it on its first push
  • Repositories report their scans to the team
  • Per-project findings, dependencies, and trend history
  • Evidence panels per project
  • Health score, files scored, and pushes blocked across the org
  • The delta against the previous period
  • Daily signal chart, longest active streak, and signal mix
  • Every recorded event, filterable by signal
  • Who ran what, and under which version of the policy
  • An exportable workspace report with per-project tables
  • Decide whether coding agents may use Iris Code through its MCP server
  • Set it for members' machines, the team's projects, or one project
  • Every change recorded in Workspace history with who made it
  • Owner, admin, and member roles
  • Invitations with expiry, and revocation
  • A seat limit the workspace enforces
  • Seats billed to the organisation, not to individuals
  • Country-resolved pricing, billed monthly
  • A 14-day trial that starts when the workspace is created
Side by side

What is in each plan.

A Teams seat is Pro plus the shared workspace, so its column is Pro's with the Teams group turned on.

CapabilityFreeProTeams
Analysis
File health scoreIncludedIncludedIncluded
Whole-schema structure, focused-table usage and exportsIncludedIncludedIncluded
Aggregate schema usage and warningsNot includedIncludedIncluded
Function inventoryIncludedIncludedIncluded
Complexity scoringIncludedIncludedIncluded
Code smellsIncludedIncludedIncluded
Security smellsIncludedIncludedIncluded
JS, TypeScript, Vue/Svelte scripts, Go, Python, Ruby, C#, Java, and RustIncludedIncludedIncluded
Inline diagnosticsIncludedIncludedIncluded
Project rules for AI agentsIncludedIncludedIncluded
Shareable report from your saved first workspace scanIncludedIncludedIncluded
Configuration
Config presets (presetId)IncludedIncludedIncluded
Gate Preview - pass/fail per presetIncludedIncludedIncluded
Gate Preview file drilldownNot includedIncludedIncluded
Custom .irisconfig thresholdsNot includedIncludedIncluded
Custom enforcement limitsNot includedIncludedIncluded
Custom scoring weightsNot includedIncludedIncluded
Config StudioNot includedIncludedIncluded
Turn the MCP server off for a repository ("agentHandoff": false)IncludedIncludedIncluded
Fixes and AI agents
MCP server on one file: findings, project config, safe fixes, and refactor plansIncludedIncludedIncluded
MCP at folder and workspace scope, gate status, rule detail, and dependency riskNot includedIncludedIncluded
Safe fixes on one file, with a reason on every refusalIncludedIncludedIncluded
Safe fixes across a folder or the whole workspaceNot includedIncludedIncluded
Refactor plan and verification for one fileIncludedIncludedIncluded
Refactor plans for a folder or the whole workspaceNot includedIncludedIncluded
Package guard: packages checked before they install, in the editor, agent hooks, MCP, and iris installIncludedIncludedIncluded
Enforcement and workspace
Workspace and folder scanNot includedIncludedIncluded
Shareable reports from any fresh scanNot includedIncludedIncluded
Git pre-push hookNot includedIncludedIncluded
Build hookNot includedIncludedIncluded
Package guard on pushed lockfile changesNot includedIncludedIncluded
Dependency Audit and CVE scanNot includedIncludedIncluded
Cloud scans
Cloud scans on connected GitHub repositoriesNot includedIncludedIncluded
Per-repository triggers: merges, pull requests, or bothNot includedIncludedIncluded
Monthly scan allowance - 50 for Pro, 100 per seat for TeamsNot includedIncludedIncluded
Every finding linked to its line on GitHubNot includedIncludedIncluded
Score history, trends, and a dependency audit per repositoryNot includedIncludedIncluded
Personal activity and cross-repository audit historyNot includedIncludedIncluded
Teams workspace
Pro for every member of the organisationNot includedNot includedIncluded
Shared team policy committed as .irisconfig.jsonNot includedNot includedIncluded
Projects reporting from CI, with trendsNot includedNot includedIncluded
Organisation analytics, activity, and audit historyNot includedNot includedIncluded
Agent policy: whether coding agents may use the MCP server, set per machine, team project, or projectNot includedNot includedIncluded
Seats, roles, and invitationsNot includedNot includedIncluded
CLI
iris init - project setup in one commandIncludedIncludedIncluded
iris check - single-file scanIncludedIncludedIncluded
iris fix --safe and iris refactor - one fileIncludedIncludedIncluded
iris install and remove - package guard on installsIncludedIncludedIncluded
iris secrets - no auth requiredIncludedIncludedIncluded
iris security - no auth requiredIncludedIncludedIncluded
iris schema, graph, mcpIncludedIncludedIncluded
iris rules, report, config, auth, slack, hook statusIncludedIncludedIncluded
iris gate - CI enforcement gateNot includedIncludedIncluded
iris deps, cve, sbomNot includedIncludedIncluded
iris todosNot includedIncludedIncluded
iris hook install and uninstallNot includedIncludedIncluded
iris check - directory and staged scansNot includedIncludedIncluded

Pricing adjusts by region where a local rate is available.

Next

Choose the workflow before the plan.

Start free in your editor, inspect the available controls, then pay only when you need broader enforcement or a shared team.

Install Iris Code

VS Code and its forks from the Marketplace, or the plugin in any JetBrains IDE.

Read the config docs

How one .irisconfig.json keeps thresholds aligned across a whole team.

Explore the features

File analysis, workspace scans, the gate, and every enforcement surface.

Iris Code

Score every file. Stop the bad ones shipping.

Product
FeaturesSchema diagramPricingTeamsPlaygroundCompare
Surfaces
CLIMCP for agentsLanguagesDownloadVS Code MarketplaceOpen VSXJetBrains Marketplace
Learn
DocsGetting startedHealth scoreGit hooks.irisconfig.jsonCLI reference
Company
AboutBlogChangelogExtended trialsContactSupportX / Twitter
Legal
SecurityPrivacy PolicyTerms of ServiceJetBrains Plugin EULA
© 2026 Iris Code — built by David Jaja.v1.38.2