The questions we hear before a demo.

Ask for a demo: we show you the product on a project close to yours. If it clicks, we run a guided POC on your code.

Standard product support is included in the licence during European business hours, in French or English. It covers product usage questions and bug reports.

Setup, migration, custom integrations and training are quoted separately. Enhanced support with service level agreements (SLAs), on-call coverage or a dedicated contact is also quoted separately.

Code (SAST), dependencies (SCA), secrets, infrastructure (IaC), containers and cloud.

DAST also tests your applications that are already live, on the addresses whose ownership you have proven.

We support multiple languages and formats, including Java, C, C++, C#, Python, JavaScript, TypeScript, Go, PHP, Ruby, Kotlin, Swift and Rust, and we analyse firmware too. Coverage varies with the rules available for each language.

On top of that come threat modelling, pentest engagements and GRC, all in one licence.

Self-hosted, code and results are stored in your infrastructure. External AI services, integrations and exports that you configure can send data to your chosen destinations, including finding descriptions or code snippets. Review the data sent and your network policy before enabling them.

As SaaS, we fetch the code from your source manager and scan it in your instance, hosted in the European Union at OVHcloud or Scaleway.

A mode with an agent in your VPC is in development.

It already strips descriptions, remediation text and code snippets from what it sends, but a finding's title and path can still hint at bits of source.

We will tell you when its validation is done.

No. Scanners, catalogued fixes and risk scoring run without AI.

If you want the AI features, your administrator picks the provider, and it can be a local model.

Yes. Tamis imports SARIF results (Semgrep, CodeQL…), Snyk, SonarQube, Checkmarx, Nessus and Qualys, and even picks up your Snyk triage states.

You can switch everything at once or run your tools side by side during the move.

• Code and CI: GitHub, GitLab, Bitbucket and Azure DevOps.
• IDE: VS Code and JetBrains.
• Tracking: Jira, Linear or ServiceNow.
• Alerts: Slack or Teams.
• SIEM: Splunk, Datadog or Sentinel.

We count the people who contributed to a repository analysed by Tamis in the last 90 days.

Contractors count, bots do not, and AppSec, CISO and read-only accounts are free.

We agree on the number together when we quote.

The licence alone is priced per active developer per year: €240 excl. VAT for each of the first 100, then €180 up to the 400th, with a €6,000 annual minimum.

Above 400, we prepare a quote.

The same licence pricing applies to SaaS, on premises and air-gapped deployments, including standard support. For SaaS, hosting and operations are quoted and added to the licence in one annual package. The SaaS package depends on your team, scan volume and frequency, storage and availability requirements. The total annual budget is agreed before you subscribe. Any change to capacity or price requires your agreement.

There are no features to unlock by paying more.

All the details, with a simulator, are on the pricing page.

Yes. The licence alone follows the number of active developers, with a €6,000 annual minimum excl. VAT.

You still get the whole platform. The same licence pricing applies to SaaS, on premises and air-gapped deployments, including standard support. For SaaS, hosting and operations are quoted and added to the licence in one annual package.

Yes: 15% off for non-profits, the public sector, education and research, and a launch discount for our first customers, in exchange for regular feedback.

They do not stack: the better one applies, on its own line of the quote.

One year, with no renewal hidden in the small print.

If your team grows during the year, the new price only counts at renewal.

Export your data whenever you like, as SARIF, CycloneDX, VEX or JSON.

The contract blocks no export.