Skip to main content

Pricing

Run it yourself, or let us run it

The evidence model stays fixed.
Choose who operates it and how much of the governance plane you need.

Operating modelself-hostcloud teamenterprise
Community
$0

Self-hosted, bring your own LLM keys. The full evidence model, no seat limits, no investigation cap.

Helm chart available now to closed-beta teams.

Read the self-host guide
Cloud Team
$199 /mo

We host it. Includes 25 investigations per month, then $30 per seat, per month for your responders.

Managed upgrades and retention. Additional investigations are $8 per investigation with your own keys, or $14 per investigation on ours.

Start with Cloud Team
Enterprise
from $60k /yr

Private deployment in your own account, SSO, custom evidence connectors, and a named engineer on the account.

Annual agreement.

Talk to sales
Closed beta terms

An 8-week pilot run against your real incidents. $7,500, credited in full toward the first year. No pre-committed conversion discount.

Request access

What actually differs

Packaging sits inside two editions: Personal, which we host, and Enterprise, which you host.
The investigation engine is the same row in every column — what changes is who operates it and how much of the governance plane comes with it.

Community, Cloud Team and Enterprise compared
 CommunityCloud TeamEnterprise
EditionEnterprise edition — you hostPersonal edition — we hostEnterprise edition — you host
Investigation engineFull evidence modelFull evidence modelFull evidence model
Included investigationsUnlimited25 per monthNegotiated
SeatsUnlimited$30 per seat, per monthNegotiated
Additional investigations$8 per investigation with your keys · $14 per investigation on oursNegotiated
LLM keysYoursYours or oursYours
DeploymentHelm, your infrastructureManaged by Production MasterHelm, your account, single tenant
SSO and RBACSSOSSO, RBAC, audit depth
SupportCommunityEmail supportNamed engineer on the account

Exceeding the included investigations does not move you to another plan. Additional runs are billed at $8 per investigation with your own LLM keys, or $14 per investigation on ours.

Questions the price list does not answer

What counts as one investigation?

One pipeline run from signal to report: evidence gathering, hypotheses, the adversarial challenge, and the cited report. Re-reading a finished report costs nothing.

Why are there two overage prices?

Model spend is the variable cost. Bring your own model keys and the overage is $8 per investigation because the spend lands on your provider account. Use ours and it is $14 per investigation, which covers the inference we pay for.

Is Community really unlimited?

Yes. You run it on your own infrastructure with your own model keys, so the only cost is the compute and inference you already pay for. What Community does not include is the managed service or the governance plane.

What changes Enterprise pricing?

Seat count, identity and governance controls, data residency, custom connector work, rollout support, and service expectations. The floor is $60,000 per year.

What does the closed-beta pilot fee cover?

An 8-week structured pilot run against your real incidents, with a weekly working session, at least 10 investigations, and the first cited root-cause report in week 1. The $7,500 is credited in full toward the first year. No pre-committed conversion discount.

Start on the plan that fits, change later

Start with the operating model that fits today.
Change later without retraining your team or losing the investigation record.

Self-host via Helm — available now to closed-beta teams.