Priced on what you monitor.
Not on what we find.
Start free with no card and no time limit. When you outgrow it: a platform fee per cloud plus a flat rate per monitored subscription — never per identity, because per-identity pricing would invoice you for our own discovery.
Per month. The per-subscription rate is cloud-agnostic — an AWS account and an Azure subscription cost the same.
What it would cost you.
An estimate from the published rate card, not a quote. Rate card version 2026-03-01.
Forever · no card
Continuous identity posture on a bounded estate. Not a countdown — a real free tier.
- Up to 2 subscriptions
- Up to 500 identities
- Full identity estate & lineage verdicts
- Identity Graph
- AuditMap — enabled by sales
- Remediation queue
Every feature · no card
The whole platform, unmetered, for 30 days. See your real attack surface before any commercial conversation.
- Unlimited subscriptions & identities
- Full remediation queue
- AuditMap — enabled by sales
- AI identity coverage
- Compliance evidence & auditor pack
- API access · SSO
Converts to Free at 30 days — never to a bill
Everything in Trial, continuously. Add and remove clouds and subscriptions as your estate changes.
- Everything in Trial
- Continuous discovery
- Elastic — pay for what you monitor
- Priority support
- Commitment discounts to 35%
Longer term, lower rate.
Applied to the whole bill — platform fee and subscriptions alike.
The things people actually ask.
Why not price per identity?
Because the product's job is to find identities you did not know existed — typically service principals and managed identities that outnumber your humans. Charging per identity would mean invoicing you for our own discovery. Subscriptions are a stable, predictable unit you already budget around.
Does the free tier expire?
No. It is bounded by estate size (2 subscriptions, 500 identities), not by time. The 30-day trial is separate — when it ends you drop to Free, not to an invoice.
How do I get AuditMap?
AuditMap is not bundled into a plan tier. It is enabled per organization by the AuditGraph sales team, because a resource-first exposure map depends on your Data Trust Zone classification being defined first. Ask us to enable it and we will scope that with you — including during a trial.
What counts as a subscription?
One Azure subscription, or one AWS account, or one GCP project once those connectors ship. The rate is the same across clouds. Only what you connect is billed.
What do you charge for AWS and GCP today?
Nothing, because we do not offer them yet. Azure is the generally available provider; AWS and GCP connectors are roadmap. We will not sell coverage we do not have.
Is there an enterprise tier?
Enterprise arrangements exist for larger estates, procurement requirements, and multi-year terms. There is no hidden tier of features — the difference is commercial terms, not capability.
Pricing is the easy part.
The harder question is what a scoped assessment would actually find in your tenant. Start there — we can talk about invoices afterwards.
Free forever on a bounded estate · 30-day trial unlocks everything · No credit card
Read-only access · No agents · No log ingestion · Azure generally available