Skip to content

Pricing

Priced for governed activity, never for a more complete inventory

The pricing model should align to enterprise value without discouraging customers from discovering more agents. Avoid charging heavily for every inventoried low-risk agent; that creates an incentive to hide the very objects the product should govern.

Discovery is always free

Discovered agents, MCP servers and machine identities are never billable, on any plan. Charging per discovered object would give you a reason to hide the things this product exists to reveal — and identity discovery routinely turns up tens of thousands of ephemeral objects nobody intends to govern. The two meters are protected actions, which are decisions the platform actually made, and machine identities you have chosen to bring under governance.

Caps stop billing, not enforcement

Cross a usage cap and we stop charging, alert you, and keep enforcing. A security control that fails open because an invoice threshold was crossed is not a security control.

Available now

Start by finding out what you already have

Most organisations cannot say how many agents and machine identities are running against their systems, who owns them, or what they can reach. That question is answerable now, and answering it is worth doing whether or not you ever buy a platform. Each engagement below delivers on its own, and credits in full against a subscription later. Discover is free to start. Everything on this page can be bought here when its existing price is available: the founding pilot, paid plans and AI credit packs. No checkout button is shown for a missing or mismatched price.

On sale now by card: the AI Governance Toolkit, $199 (Starter) or $599 (Professional), one-time, with an instant download.

90-day founding pilot

10 places

Ten founding customers. An owner for every AI agent and machine identity you run, what each one can reach, and audit evidence you keep.

from $7,395

Fixed fee · 90 days

  • Discovery across one cloud account and one identity provider
  • An owner for every agent and machine identity
  • What each agent and machine identity can reach
  • Audit evidence you keep
  • The fee credited in full to your first year if you continue

The fee is credited in full to your first year: $7,395 on Govern or $22,695 on Enforce.

  • Govern $7,395

    Paused while we correct this price. Nothing is charged.

  • Enforce $22,695

    Paused while we correct this price. Nothing is charged.

Your workspace is active as soon as payment goes through, and the setup guide walks you through discovery. A setup call is optional.

Questions first? Talk to us · Book an optional setup call

Buyer guide

What to put in an AI governance RFP

Compare the control boundary before comparing AI governance pricing. The cheapest proposal is not comparable if it inventories agents but cannot authorize an action.

AI security posture management

Require discovered assets, owners, effective permissions, risk factors and remediation—not a score without its inputs.

AI TRiSM and AI SPM

Separate model assurance, posture visibility and runtime enforcement, then ask which layer each vendor actually operates.

AI agent security buyer’s guide

Ask for identity, delegated authority, tool and MCP policy, data controls, human approval, containment and an exportable decision trail.

Plans

Discover is free. Paid plans are bought by card, monthly or annually, and every engagement above credits in full against a later subscription. Two-year terms are contracted: talk to us.

Discover

Find every agent and understand its authority. No enforcement, no card, no time limit.

Free

Protected actions
—
AI Security Assist
—
Discovered agents
Unlimited
Environments
1
Auditor seats
Unlimited
Evidence retention
30 days
Setup
AI-guided, included
  • Unlimited service-identity discovery from Microsoft Entra ID (rolling out), with more sources to follow
  • Ownership assignment and stale-credential reporting
  • Effective-authority and high-risk permission visibility
  • Agent risk scoring
  • Policy simulation in monitor-only mode
  • Evidence export
  • AI setup guide, with 1,000 free guide credits a month

Govern

Register, own and govern agents, with approvals and audit evidence — before you enforce anything.

$2,465/mo USD

Annual · was $2,900/mo

$29,580 billed yearly · saves 15% on twelve months

Renews automatically every year until you cancel. Cancel any time in Billing; access continues to the end of the paid period.

Protected actions
250k/mo
AI Security Assist
50k credits/period
Discovered agents
Unlimited
Environments
3
Auditor seats
Unlimited
Evidence retention
1 yr
Setup
AI-guided, included
  • Everything in Discover
  • Agent registry and identity binding
  • Policy authoring, versioning and simulation
  • Human-in-the-loop approvals
  • Audit evidence generation and control mapping
  • SIEM and webhook export

Card checkout for this is not switched on yet.

Enforce

Core

Turn the same policies on. Allow, deny, redact, sandbox, approve or stop at the moment of action.

$7,565/mo USD

Annual · was $8,900/mo

$90,780 billed yearly · saves 15% on twelve months

Renews automatically every year until you cancel. Cancel any time in Billing; access continues to the end of the paid period.

Protected actions
1M/mo
AI Security Assist
200k credits/period
Discovered agents
Unlimited
Environments
10
Auditor seats
Unlimited
Evidence retention
1 yr
Setup
AI-guided, included
  • Everything in Govern
  • Runtime agent gateway and agent firewall
  • Prompt-injection defense and data-loss prevention
  • Tool, API and MCP capability controls
  • Sandboxing and execution boundaries
  • Kill switch, quarantine and containment
  • Incident cases and activity replay

Card checkout for this is not switched on yet.

Enterprise

Residency, retention and deployment control for organizations that must prove it continuously.

$20,400/mo USD

Annual · was $24,000/mo

$244,800 billed yearly · saves 15% on twelve months

Renews automatically every year until you cancel. Cancel any time in Billing; access continues to the end of the paid period.

Protected actions
5M/mo
AI Security Assist
500k credits/period
Discovered agents
Unlimited
Environments
Unlimited
Auditor seats
Unlimited
Evidence retention
7 yr
Setup
AI-guided, included
  • Everything in Enforce
  • Customer-managed gateway and data plane
  • Advanced data residency; premium retention is Planned
  • Continuous compliance mapping and board reporting
  • Dedicated support with a named technical contact
  • Unlimited environments

Card checkout for this is not switched on yet.

Annual and two-year terms discount the base subscription; seats, usage and add-ons bill at list. Pilot fees are credited in full against a first-year production commitment. Checkout asks for your company name and billing email, and offers an optional business tax ID field; buyers outside the US should add theirs, as those invoices are reverse-charged. Every Stripe price is checked against this page before Checkout opens.

AI Security Assist

Prepaid analysis, visible down to the last credit

Paid plans include AI credits. Every analysis costs 100 credits, the balance is shown inside the governed portal, and analysis stops at zero until an administrator adds a pack. Security enforcement itself never stops.

Setup is AI-guided and included on every plan: a 7-step checklist that checks itself against your workspace, free. The guide’s AI help draws on the same credits, and Discover includes 1k free guide credits a month. Anything of 25 credits or more shows its cost before it runs, and auto top-up stays off unless you turn it on.

What the setup guide’s AI help costs
Guide helpCreditsCost
Ask a question5$0.05
Explain an event10$0.10
Draft or tune a policy25$0.25
Map to controls25$0.25
Analysis or evidence pack100$1.00

AI Security Assist 10k

$100

10k credits · 100 analyses

100 security analyses for an individual team or pilot.

AI Security Assist 50k

$500

50k credits · 500 analyses

500 security analyses for an operating security program.

AI Security Assist 200k

$2,000

200k credits · 2k analyses

2,000 security analyses for a high-volume enterprise estate.

One-time payment. Credits are added to your workspace as soon as Stripe confirms it; without a workspace, the purchase creates one.

Add-on

Agent Safety Testing: Team

Red-team your agents before every release, fail the build when they regress, and keep the reports as evidence.

$299/mo

or $2,990/yr — 2 months free

Included for founding pilot customers. Discovery stays free and is never counted.

  • Up to 10 agents under test
  • Unlimited static and dynamic test runs
  • CI gate: fail the build below a score or on any regression
  • Reports mapped to the OWASP Top 10 for LLM Applications
  • Regression history per agent version, and evidence export

How Agent Safety Testing works

Frameworks

ISO/IEC 42001 toolkit: $299 per framework report; included from Govern

Optional implementation help

Setup is free. A consultant is optional.

Every plan includes the AI-guided setup checklist, and nothing in it waits on a person. If you would rather have a consultant work with you inside your workspace, buy hours here at $100 an hour. Hours are added to your workspace as soon as Stripe confirms the payment.

  • Starter

    $1,000

    10 hours

    A consultant connects your identity provider and first discovery source and reviews your starter policy with you.

  • Assist

    $2,500

    25 hours

    Discovery across your main estates, a monitor-mode rule set tuned on your own traffic, and a first evidence export.

    Pay by bank transfer (ACH) — no card fees.

  • Plus

    $5,000

    50 hours

    Several business units onboarded, approvals and delegated administration designed, and enforcement switched on in stages.

    Pay by bank transfer (ACH) — no card fees.

  • Project

    $10,000

    100 hours

    A planned rollout with kickoff, mid-point review and handover dates agreed up front.

    Pay by bank transfer (ACH) — no card fees.

  • Ongoing Advisory

    $1,000/mo

    10 hours each month

    Hours each paid month for policy reviews, new agents and audit preparation. Cancel any time.

Extra hours beyond a package are asked for in advance and only charged once you approve them; a change of scope is invoiced. A consultant works only in the areas you grant, can never reach billing, members, credentials or the kill switch, and you can pause or end their access at any time.

Estimate

Build a number you can take to finance

Every input below is something you can forecast and audit. Nothing here depends on how many agents we happen to discover.

Plan

Protected actions per month

Runtime decisions the platform evaluates. Discovery is not metered.

1M actions/mo(1M included)

Seats

Auditor seats are unlimited and free on every plan.

Maximum 100,000 seats per role.

Add-on modules

Estimate · Annual

Enforce subscription
$7,565

Per month$7,565

Billed every 12 months$90,780

Saves $16,020 versus monthly

A configuration with extra seats, overage or modules is quoted: we confirm it and send an order form. Standard plans can be bought by card above.

Add-ons

Turn on only what your environment requires

AI FinOps

$1,200/mo

Attribute model and tool spend to the agent, team and purpose that caused it, then govern it with budgets, quotas and policy-aware model routing.

Machine identity security

$2,200/mo

Govern the non-human identities underneath the agents: workloads, service accounts, pipelines and the credentials they hold, with effective permissions and least-privilege analysis.

Customer-managed gateway

$3,500/mo

Run the enforcement data plane inside your own network so protected traffic never leaves your boundary.

Advanced data residency

$1,800/mo

Regional isolation for control-plane data, with documented processing locations for each component.

Premium evidence retention — Planned

Planned

Planned seven-year retention for decisions, approvals and evidence bundles. Tamper-evident storage and export integrity verification are not shipped today.

Advanced compliance packs

$1,500/mo

Continuous control mappings and reporting for ISO/IEC 42001, the EU AI Act and sector-specific regimes.

Licences

Five roles, and one of them is free on purpose

Audit and compliance get read-only access at no cost on every plan. Widening internal sponsorship is worth more to us than the seat revenue.

RoleDiscoverGovernEnforceEnterprise
AuditorRead-only access to evidence, reports and control mappings.UnlimitedUnlimitedUnlimitedUnlimited
ApproverDecides on actions routed for human approval.0not available25+$19/seat100+$19/seat500+$15/seat
DeveloperAPI, SDK and CLI access for embedding controls.2not available5+$49/seat15+$39/seat50+$29/seat
Security operatorInvestigates, contains and runs incident cases.2not available5+$99/seat15+$79/seat50+$59/seat
AdministratorConfigures policy, integrations and tenant settings.1not available3+$149/seat8+$119/seat25+$89/seat

Components

  • Platform subscription based on organization scale and security tier.
  • Usage component for governed runtime actions/events or protected workloads.
  • Enterprise add-ons: customer-managed gateway, advanced data residency, premium retention, dedicated support and advanced compliance.
  • Optional FinOps savings module or premium analytics tier.
  • Professional services limited to implementation packages, not required forever.

Commercial decisions

  • Offer a discovery/governance entry tier that can convert into runtime enforcement.
  • Use annual enterprise contracts; provide pilot credit toward production commitment.
  • Define usage metrics customers can forecast and audit.
  • Create clear overage caps/alerts so security enforcement never becomes a surprise bill.

PACKAGING LOGIC

Charge for value and governed activity—not for making the customer’s inventory more complete.

Questions about packaging for your environment? Talk to us. The billing terms these plans are sold under are in the terms of service, who buys it and what they prove first is on solutions, and what the agents themselves cost to run — as opposed to what this platform costs to buy — is AI FinOps.