💰 Transparent Per-Seat Pricing
Security at Every Scale
From solo engineer to Fortune 500. Transparent per-seat pricing — no per-workload surprise bills. No vendor lock-in.
Standard Pricing
Tier 1
Community
$0forever
For individuals and small teams getting started with cloud security
- 3 users included
- Up to 500 cloud assets
- 3 cloud accounts (AWS, GCP, Azure)
- Tier 1 agentless cloud scanning
- CIS v2.0 + SOC 2 compliance
- 3D blast radius visualization
- 90-day data retention
- Executive summary reports
- Community support
Tier 1 + 2
Team
$9,000/year
For growing teams with multi-cloud environments and compliance needs
- Up to 10 users
- Up to 2,500 cloud assets
- 10 cloud accounts
- Tier 1 + Tier 2 scanning
- Container image scanning
- Kubernetes misconfiguration detection
- MITRE ATT&CK technique tagging
- SOC 2, HIPAA, ISO 27001, PCI DSS
- 180-day data retention
- Blast radius analysis
- All report types
- Webhook integrations
- Email support (48-hour response)
Most Popular
Tier 1 + 2 FullPro
$30,000/year
For security teams needing deep runtime visibility and compliance automation
- Up to 50 users
- Up to 25,000 cloud assets
- 50 cloud accounts
- Tier 1 + Tier 2 full scanning
- Container image CVE scanning + SBOM
- Kubernetes security auditing (CIS, RBAC, NetPol)
- MITRE ATT&CK mapping + attack path analysis
- PCI DSS v4.0 control mapping
- BYOK encryption (AES-256-GCM)
- All 21 compliance frameworks
- 365-day data retention
- Drift detection + auto-resolve
- SAML/OIDC SSO
- Webhook integrations (Slack, PagerDuty, Jira)
- Priority support (4-hour response)
All Tiers
Enterprise
Custom
For organizations requiring complete coverage, self-hosted deployment, and dedicated support
- Unlimited users
- Unlimited cloud assets
- Unlimited cloud accounts
- All 3 scanning tiers (incl. runtime eBPF)
- All 21 compliance frameworks + custom frameworks
- Zero-knowledge encryption
- BYOK encryption with key rotation
- 730-day data retention + archive
- SAML/OIDC/LDAP SSO + SCIM 2.0
- Self-hosted / on-prem deployment
- Air-gapped mode (zero egress)
- Helm chart for Kubernetes
- Dedicated Customer Success Manager
- SLA guarantee (99.9% uptime)
- Custom data residency (US, EU, APAC)
- Phone + video support
Detailed Feature Comparison
Everything included in each plan at a glance
| Feature | Community | Team | Pro★ | Enterprise |
|---|---|---|---|---|
| Cloud Accounts | 3 | 10 | 50 | Unlimited |
| Assets Monitored | 500 | 2,500 | 25,000 | Unlimited |
| Team Members | 1 | 10 | 50 | Unlimited |
| Data Retention | 90 days | 180 days | 365 days | 730 days |
| Scans Per Day | 2 | 10 | 100 | Unlimited |
| Tier 1 Scanning | ||||
| Tier 2 Scanning | — | ✓ Full | ✓ Full | |
| Tier 3 eBPF | — | — | — | |
| MITRE ATT&CK | — | Tagging | Full Mapping | Full Mapping |
| BYOK Encryption | — | — | ✓ + Rotation | |
| SSO | — | — | SAML/OIDC | SAML/OIDC/LDAP |
| Self-Hosted | — | — | — | |
| Air-Gapped Mode | — | — | — | |
| Support | Community | Email 48h | Priority 4h | Dedicated CSM |
Compliance frameworks supported
SOC 2 Type IINIST 800-53CIS v2.0PCI DSS 4.0HIPAAISO 27001GDPRMITRE ATT&CK
Need a Custom Plan?
Enterprise plans include custom pricing, dedicated support, on-prem deployment, BYOK encryption, air-gapped mode, and tailored compliance frameworks.