Flat and based on your footprint. Never metered per pull request, per deploy or per seat, because the value is prevention and metering volume punishes shipping.
Five working days answering one question: what breaks first, and what does it cost you.
Pick the two that worry you most.
Blast radius, drift, recovery, security, observability and cost.
Seven days free before any of this, with all six control sets and no card. Nothing charges automatically at the end.
Because neither of us knows yet whether you need this. Five days of looking is a cheaper way to find out than a year of a subscription, and the fee comes off the first three months if you continue.
If you do not continue, you keep the findings and the fixes. They are yours either way.
I say no on about one call in five, because sometimes the honest answer is that you are not there yet. A referral is worth more to me than a bad engagement.