Usage-based credits, not per-seat. Same cost per query regardless of how many agents call it. Start free.
For curious developers and small environments — confidence-scored threat answers, free.
No credit card required · Nothing to cancel · Upgrade to Solo or Team any time
Free for 14 days, then $240/mo
Free for 14 days, then $2,640/yr
Billed annually — save $240/yr
For one practitioner using it daily — more credits, higher limits, and longer history than Free.
Everything in Free, and
14-day free trial · No credit card required · Automatically continues on our Free plan if you don't subscribe
Free for 14 days, then $480/mo
Free for 14 days, then $5,280/yr
Billed annually — save $480/yr
For a whole team, not a single practitioner — pooled credits, teammate access, shared agent management, and team analytics.
Everything in Solo, and
14-day free trial · No credit card required · Automatically continues on our Free plan if you don't subscribe
For orgs with enterprise requirements — your own feeds (BYOF), SSO, unlimited seats, and marketplace procurement.
Everything in Team, and
Core investigation — entity resolution, evidence lookup, relationship exploration, prioritization, assessments, recommendations — is available on every tier. Plans differ on scale, collaboration, governance, and convenience.
| Capability | Free | Solo | Team | Enterprise |
|---|---|---|---|---|
| Trial | Not applicable — plan is free | 14-day free trial | 14-day free trial | Not applicable — POV process |
| Monthly credits | 100 | 1,000 | 3,000 (pooled) | Custom |
| Core investigation workflow | ✓ | ✓ | ✓ | ✓ |
| API + MCP server | ✓ | ✓ | ✓ | ✓ |
| Shared credit pool | No | No | Yes | Yes |
| Invite teammates | No | No | Yes | Yes |
| Batch endpoints | 5 items / request | 20 items / request | 50 items / request | Custom |
| Rate limits | 10 req / min | 60 req / min | 180 req / min | Custom |
| Concurrent active workflows | 1 | 2 | 5 | Custom |
| Saved investigation history | 7 days | 90 days | 1 year | Custom |
| Usage & agent activity history | 7 days | 90 days | 1 year | Custom |
| Team collaboration & analytics | — | — | ✓ | ✓ |
| Credential lifecycle audit | Basic revoke / create | Guided rotation | Guided + auditability | Guided + auditability |
| Bring Your Own Feed (BYOF) | — | — | — | ✓ |
| Dedicated graph instance | — | — | — | ✓ |
| Support | Email support | Priority email | Priority email | Dedicated support |
Yes. Connect your agent and it's answering threat questions in minutes.
Yes — Enterprise is available via all major cloud and frontier marketplaces (AWS, Azure, GCP, Snowflake, Databricks).
Yes — Bring Your Own Feed (BYOF) is included in the Enterprise tier.
A typical lightweight-to-normal investigation consumes roughly 15–30 credits. Allocations will be revisited after real usage data.
If you haven't added a payment method by day 14, your account automatically moves to the Free plan. You'll keep access with Free plan limits (100 credits/month, 1 registered agent, 7-day data retention). You can upgrade back to Solo or Team at any time.
Better decisions, fewer queries, lower cost. Start free in minutes.
