CodeCleared FAQ

Find answers about CodeCleared credits, integrations, webhooks, plans, retention, SSO, and service levels.

Purpose

Answers to common customer questions about using CodeCleared.

Who

Customers evaluating or operating CodeCleared.

Prerequisites

Check the active organization and current Billing information first.

How it works

How are credits used? Core and SAST use separate pools.

Is GitLab available? Yes. Connect GitLab.com via OAuth at Settings → Sources. Bitbucket remains a roadmap item, not a shipped integration.

Is SAST included? It is a separate add-on and credit pool.

Which plans have API access? API access is generally Team and above.

How are webhooks verified? Validate X-CodeCleared-Signature against the raw body.

Why are PR checks missing? Enable them and grant the required VCS permission: GitHub App Checks, or GitLab External Status Checks (Premium/Ultimate).

How do monorepos work? Each lockfile path can be a project unit.

Why did I receive 402? Missing credits/entitlement, or no MAU license this month (seat_license_required). See Credits and 402.

Where are my invoices? After a Stripe payment they appear under Settings → Billing → History (hosted Stripe invoice link) — including subscription charges, seat purchases, credit pack Checkout, and auto-recharge. Free with no payment has an empty list. See Billing.

I paid but got no email? Owners and admins get CodeCleared billing emails after Stripe confirms payment (subscription active, receipts, payment failed). Check spam, confirm you are an owner/admin, and open Billing for the invoice link. See Billing.

What is retained? Scan payload retention is plan-capped (Free 30 days, Starter 90, Team 365, Regulated unlimited). When a plan change is applied, retention resets to the new plan’s maximum; you may then choose a shorter window in Settings → Organization, but not longer than the plan. See Billing.

Which SSO tiers exist? Team includes basic SSO; Regulated includes full SSO.

How do I reset my password? From /login, click Forgot password?, submit your email, then use the link in the email (valid 2 hours). If already signed in, open Security (/security) to change your password. See Reset your password.

Is a finding SLA the uptime SLA? No: finding SLA tracks finding response expectations; service uptime terms are separate.

Business rules

FAQ answers describe current customer-facing behavior, not contractual terms beyond applicable agreements.

Scenarios & edge cases

Need exact balance or pricing: open Billing. Need a future integration: do not plan production work around the roadmap.

Limits

Plan terms, limits, and availability can change; Billing and applicable agreements control.

Common errors

Treating future integrations as shipped.
Confusing a 402 with a bad request.