Open Source
$0
Best for: Self-hosted evaluation and internal platform control.
Self-hosted core platform for AWS, GitHub, and Kubernetes machine identity workflows.
- Trust graph + exposure detections
- Community support
- API and docs access
Pricing
Pricing that matches your control boundary
Start self-hosted, move to hosted Pro, or add private controls when your program requires them.
Every plan starts with read-only onboarding; enforcement changes remain under your control.
Pro
$30/user/mo
$30 per user per month, billed annually at $360 per user.
Best for: Fast time-to-value without managing infrastructure.
Hosted SaaS with advanced detections, collaboration workflows, and managed operations.
- Everything in Open Source
- Hosted trust graph and accelerated queries
- SAML SSO, alerts, and workflow integrations
- 14-day hosted trial with guided setup
Enterprise
Custom quote
Best for: Private deployment, procurement workflows, and advanced governance.
Advanced governance, private deployment options, and enterprise-grade support.
- Everything in Pro
- SCIM, regional controls, and private tenancy
- 24/7 support, SLA, TAM, and onboarding program
Feature Matrix
Compare what changes by plan
The core trust-path workflow stays consistent. The difference is how much hosting, governance, and support your team needs.
| Capability | Open Source | Pro | Enterprise |
|---|---|---|---|
| AWS IAM role discovery | Included | Included | Included |
| Kubernetes RBAC and service account mapping | Included | Included | Included |
| Git repository credential exposure scanning | Basic detectors | Advanced signatures + workflows | Advanced + custom signatures |
| Trust graph explorer | Included | Included + hosted query acceleration | Included + custom graph retention |
| Hosted SaaS | No | Yes | Yes |
| SSO/SAML + SCIM | No | SAML | SAML + SCIM + advanced controls |
| Data residency options | Self-host control | US + EU | Regional + private tenancy |
| Support and SLAs | Community | Business-hour support | 24/7, named TAM, custom SLA |
Impact Model
Build the business case before procurement
Model expected impact with transparent assumptions, then bring the result into your security review.