Pricing
Transparent plans. Same engine everywhere.
Per seat, no surprises. Token savings (Layers A + B) are included from the Team plan up — teams running JavaScript or Rust toolchains typically recover the per-seat cost within the same billing month. Annual billing saves an additional 20–25%.
- — All core guards (ingress, egress, tool firewall)
- — Up to 3 seats
- — Layer B — proxy output filter
- — 7-day audit retention
- — Community support
- — Everything in Starter
- — Up to 50 seats
- — Layer A + B token savings
- — 30-day audit retention
- — Hosted control plane
- — Business-hours support
- — Everything in Team
- — Up to 500 seats
- — SAML/OIDC SSO + SCIM provisioning
- — SIEM-ready exports (Splunk, Elastic, syslog)
- — 90-day audit retention
- — Compliance evidence pack
- — Token savings dashboard + per-team breakdown
- — Custom policy profiles
- — Priority support
- — Everything in Business
- — Unlimited seats
- — Self-host / air-gapped option
- — Customer-managed KMS + data residency
- — Custom token filter strategies
- — 24×7 SLA-backed support
- — Dedicated CSM
- — SOC2 / ISO27001 / HIPAA artefacts
How fast do token savings pay for the plan?
At Claude Sonnet pricing ($0.003/1K tokens), a 10-developer team saving 30% of context tokens across 500K tokens/dev/month recovers ≈ $45/mo — more than 4× the Team plan cost. Opus users see 5× more. Savings stack with security enforcement at zero extra cost.
What counts as a seat?
Any user who authenticates to the workspace — developers, reviewers, and CI bot accounts each occupy one seat.
Can I switch plans anytime?
Yes. Upgrades are prorated immediately; downgrades take effect at the end of the billing period via the Stripe portal.
Is self-hosting available?
On the Enterprise tier. Helm chart, signed OCI bundles, Ed25519 license files — no outbound dependency on our SaaS.