InvisiRisk adds starter pricing for standalone build firewall

InvisiRisk has launched a lower-cost Starter tier for organizations that want its Build Application Firewall without buying the company’s broader software composition analysis and governance features. The move is aimed at DevSecOps teams that already use other security tools and want real-time protection during software builds.

Why it matters: - The new tier gives teams a cheaper way to add build-time security without replacing existing software composition analysis tools. - InvisiRisk is targeting a gap in the software supply chain: activity that happens while code is being built, not after it is scanned. - The pricing shift could make build-layer enforcement more accessible for organizations that already have layered security stacks.

What happened: - InvisiRisk introduced a Starter pricing tier for its Build Application Firewall, or BAF. - The tier is meant for organizations that want to deploy the BAF while continuing to use existing software composition analysis tools. - The company said the new option is designed for teams that already have SCA technology in place or do not want to consolidate application security platforms. - The announcement came from Houston on Sept. 2, 2026.

The details: - Starter includes InvisiRisk’s core BAF capabilities without the added SCA, build analysis, compliance and governance features in the Pro and Enterprise plans. - The Starter plan costs $2,500 per month, or $2,000 per month when billed annually. - Starter includes 250 build credits per month. - InvisiRisk does not charge per-user pricing for the tier. - The BAF sits inline with the build process and uses deep packet inspection to monitor network activity in real time. - Security policies can allow, warn or block activity based on defined rules. - The system is designed to help stop build-time tampering, credential and intellectual property exfiltration, suspicious "phone home" behavior, unauthorized network activity and other malicious activity. - InvisiRisk said the platform adds protection against software supply chain attacks, including threats that traditional vulnerability scanners may not yet know about. - Pro and Enterprise tiers remain available for organizations that want BAF plus software composition analysis, build analysis, compliance and governance capabilities.

Between the lines: - The updated pricing suggests InvisiRisk is positioning BAF as a standalone control rather than forcing buyers into a broader platform purchase. - The move also reflects how many DevOps and DevSecOps teams already run multiple security tools and may want targeted enforcement at the build stage. - InvisiRisk is emphasizing the difference between scanning code and monitoring what happens during the build itself. - The company said it released the first BAF in 2025.

What's next: - Organizations with existing SCA and application security tools can now adopt BAF without changing their broader security stack. - The Pro and Enterprise offerings remain the path for buyers that want a more consolidated security platform. - InvisiRisk is likely to keep pitching build-time visibility as a complement to traditional scanning and governance tools.

The bottom line: - InvisiRisk is making its build-time firewall easier to buy on its own, betting that more teams will pay for targeted protection where traditional tools are weakest.