Skip to main content

Pricing

Run it yourself, or let us run it

The evidence model stays fixed.
Choose who operates it and how much of the governance plane you need.

Operating modelself-hostcloud teamenterprise
Community
$0

Self-hosted, bring your own LLM keys. The full evidence model, no seat limits, no investigation cap.

Self-hosting via Helm: available in closed beta. A free signup issues your install credential.

Sign up for Community Read the self-host guide
Cloud Team
$199 /mo

We host it. Includes 25 investigations per month, then $30 per seat, per month for your responders.

Managed upgrades and retention. Additional standard investigations are $14 per investigation. Deep investigations: pricing on request.

Start with Cloud Team
Enterprise
from $60k /yr

Self-hosted private deployment in your own account, available in closed beta. Also SSO, custom evidence connectors, and a named engineer on the account.

Annual agreement.

Talk to sales
Closed beta terms

An 8-week pilot run against your real incidents. $7,500, credited in full toward the first year. No pre-committed conversion discount.

Request access

What actually differs

Packaging sits inside two deployment models: managed, which we host, and self-hosted, which you host and which is available in closed beta.
The engine is the same either way.

Community, Cloud Team and Enterprise compared
Plan featureCommunityCloud TeamEnterprise
Deployment modelSelf-hosted — you host (closed beta)Managed — we hostSelf-hosted — you host (closed beta)
Investigation engineFull evidence modelFull evidence modelFull evidence model
Included investigationsUnlimited25 per monthNegotiated
SeatsUnlimited$30 per seat, per monthNegotiated
Additional standard investigations—$14 per investigation. Deep: pricing on requestNegotiated
LLM keysYoursOursYours
DeploymentHelm, your infrastructure (available in closed beta; a free signup issues your install credential)Managed by Production MasterHelm, your account, single tenant (available in closed beta)
SSO and RBAC—SSOSSO, RBAC, audit depth
SupportCommunityEmail supportNamed engineer on the account

Exceeding the included investigations does not move you to another plan. Additional standard runs, meaning triage or fast, are billed at $14 per investigation. Deep investigations: pricing on request.

What the price list leaves out

What counts as one investigation?
One pipeline run from signal to report: gathering the evidence, forming the hypothesis, and publishing the cited report. Re-reading a finished report, or sharing it, costs nothing.
What does an investigation past the included 25 cost?
A standard investigation, meaning a triage or fast run, is billed at $14 per investigation. The managed service runs on the model we supply, so the model spend is inside that price. Deep investigations: pricing on request.
Is Community really unlimited?
Yes. You run it on your own infrastructure with your own model keys, so the only cost is the compute and inference you already pay for. What Community does not include is the managed service or the governance plane.
What changes Enterprise pricing?
Seat count, identity and governance controls, data residency, custom connector work, rollout support, and the service expectations you need in writing. The floor is $60,000 per year; the quote is built from those items.
What does the closed-beta pilot fee cover?
An 8-week pilot against your real incidents: a weekly working session, at least 10 investigations, and the first cited report in week 1. The $7,500 is credited in full toward the first year. No pre-committed conversion discount.

Start on the plan that fits, change later

Start with the operating model that fits today.
Change later without retraining your team or losing the investigation record.

Self-host via Helm — available in closed beta.