$0/ month
- Agents
- 2
- Policies
- 5
- Events / mo
- 25K
- Retention
- 7 days
The plan a new organisation starts on. Quotas enforced, no card.
Company / Pricing
Priced on governed agents. Not on how safe you are allowed to be.
Capacity scales with the ladder. The governance posture does not — fail-closed behaviour, the detector set, every enforcement point and the evidence ledger are the same on the entry paid tier as on Enterprise.
From $29 per month Agents, not seats or models Enforced entitlements, tested against this page
THE LADDER
Four tiers and a custom track.
The capacity number is concurrent governed agents. Retention is how long the evidence ledger holds governed-action records.
$29/ month
- Agents
- 10
- Policies
- 25
- Events / mo
- 200K
- Retention
- 30 days
The entry paid tier — and where the governance surfaces were widened down to.
$99/ month
- Agents
- 50
- Policies
- 100
- Events / mo
- 1M
- Retention
- 90 days
Adds SIEM integration and custom dashboards.
$299/ month
- Agents
- 200
- Policies
- 500
- Events / mo
- 5M
- Retention
- 180 days
Identical capabilities to Pro. What changes is capacity.
Custom
- Agents
- Unlimited
- Policies
- Unlimited
- Events / mo
- Custom
- Retention
- 365 days
SAML SSO, SCIM provisioning, federation, delegated admin, private deployment, advanced evidence export.
Planned, not yet available. The billing design defines a 14-day card-required trial that converts to Startup on day 14, but it is not an entitlement in the shipped plan set and self-serve signup is not open. It is described here as designed, not offered. Nothing is entitled before payment confirms — a plan sits inactive until its checkout completes rather than granting capacity optimistically, and a failed webhook never defaults to active.
CAPABILITY PARITY
Core governance starts at Startup. Capacity and support scale from there.
Trial is a bounded evaluation path. Startup, Pro and Team share one verified governance foundation — the commercial fences were deliberately flattened toward the lower tiers, under a rule that they may only ever widen or hold, never narrow on an existing subscriber. Enterprise is tailored deployment and terms, not a way to buy basic safety.
Included everywhere
Why it is not a tier lever
Fail-closed enforcement
Any transport error, timeout, non-2xx or unparseable response resolves to deny. A safer failure mode is not an upgrade.
The full detector set
Secrets, sensitive data, regulated identifiers, injection, encoded payloads, risky tool intent and unsafe destinations run identically on every paid tier.
Every enforcement point
Gateway, transparent MCP proxy, forward-auth and SDK. What scales is how many agents you govern through them, not where you may insert.
The hash-chained ledger
Evidence integrity is structural. A cheaper plan does not get a weaker audit trail.
opa_policies — keep your own engineBring the OPA/Rego you already run. Deliberately widened down to the entry paid tier rather than held as an upsell.
Cloud providers and MCP catalog
Connection, discovery and the registry, from Startup upward.
Compliance reports and webhooks
From Startup upward.
MFA and custom roles
Access control is not a premium feature.
Governing an agent safely is the product. Charging more for the safe failure mode, the detectors or the audit chain would make the cheapest plan the most dangerous one to run — which is not a ladder we are willing to build.
WHAT DOES DIFFER
Capacity, integration depth and support.
Dimension
Where it changes
Capacity
Governed agents and evidence retention, per the table above.
Pro and above
SIEM integration, custom dashboards.
Team
Capacity only — Team grants no entitlement Pro does not already have.
Enterprise
SAML SSO, SCIM provisioning, SSO enforcement, org-wide MFA enforcement, multi-cluster federation, delegated admin, private deployment, advanced evidence export.
HIGH TOUCH
Two tracks that start with a conversation.
Track
What it is
Design partner
A scoped 30-day engagement on one consequential agent workflow, with named success criteria and founders in the room. No fee. What we ask in return is a reference — a named case study and permission to use your logo — once the engagement has concluded and you are willing to stand behind the result. How the programme runs.
Enterprise
Priced per governed agent, so the bill tracks the same capacity dimension the tiers above use rather than a separate metric. Adds federation, delegated admin, private deployment and separation of duties on policy approval.
Honesty note
Self-serve signup is built and not yet open. The tiers, capacities and billing flow above are implemented and enforced; public card signup is gated on payment-integrity work — no surprise charges, nothing entitled before a verified payment, no plan activating on a failed webhook. Until it opens, every plan starts with a briefing and is provisioned by us.
What this page deliberately does not claim. No annual discount, because that is a pricing decision not yet made. No usage-overage rates, because overage billing is not live. No air-gapped or on-premise tier, because that deployment shape is architectural today and not something we can demonstrate. No MSP or partner programme, and no customer or pilot counts — those need a number behind them before they appear here.