Get started
Start your trial. Run your first scan.
Three steps and a few minutes: start the 14-day trial in your portal, install Vulkro, sign in and scan.
A card at checkout starts the trial. Nothing is charged until day 15, and scans run on your machine.
- 01
Start the 14-day trial
Choose Core, Salesforce, or both in your portal and add a card at checkout. Nothing is charged during the trial; on day 15 it becomes paid Pro unless you cancel from the Billing page.
- 02
Install, sign in and scan
Pick what you are securing. Each block is three commands, in order: install, sign in, scan. In CI, use a CI key from your portal instead of signing in; on an air-gapped machine, a licence file.
Application codeVulkro CoreJavaScript, TypeScript, Python, Go, Java, PHP, C and C++.# Install $ curl -fsSL https://dist.vulkro.com/install.sh | bash # Sign in with the account that holds your trial or Pro $ vulkro login # Scan a repository $ vulkro scan .
SalesforceVulkro for SalesforceApex, LWC, Aura, Visualforce, Flows, metadata and the live org.# Install $ curl -fsSL https://dist.vulkro.com/install-sf.sh | bash # Sign in with the account that holds your trial or Pro $ vulkro-sf login # Scan a Salesforce DX project $ vulkro-sf scan ./force-app
- 03
Bring it where you work Optional
The finding on the line as you write it, and security answers for your AI assistant.
For teams
Vulkro Cloud. Enterprise security for code and Salesforce.
Your code repositories and Salesforce orgs in your own isolated tenant, scanned on a schedule, with one list of issues for the team. Every member also gets Pro on their own machine. Choose a plan and we set up your workspace, with a 14-day trial.
- 01Choose a planStarter or Business, for Core, Salesforce, or both. Tell us what you want to connect.
- 02Get your workspaceSet up by our team within two business days, at your-company.vulkro.com, with its own database, storage and keys.
- 03Connect repositories and orgsGitHub, GitLab or Bitbucket with an access token. Salesforce orgs read-only: settings, metadata and code, never records.