Pay only for what you use. All plans include the full platform with zero-knowledge architecture.
Perfect for testing and small environments
For growing security teams
For mid-market enterprises
For large-scale deployments
| Feature | Freemium | Starter | Professional | Enterprise |
|---|---|---|---|---|
| Endpoints | 20 | 1,000 | 10,000 | Unlimited |
| Real-time Detection | ✓ | ✓ | ✓ | ✓ |
| Zero-Knowledge Architecture | ✓ | ✓ | ✓ | ✓ |
| API Access | ✓ | ✓ | ✓ | ✓ |
| Email Support | - | ✓ | ✓ | ✓ |
| SIEM Integration | - | - | ✓ | ✓ |
| Custom Baselines | - | - | ✓ | ✓ |
| Air-Gapped Deployment | - | - | - | ✓ |
| 24/7 Support | - | - | - | ✓ |
An endpoint is any entity generating logs: servers, workstations, network devices, cloud services. We count unique entities, not log volume.
No. We process logs locally on your infrastructure. Our pricing is based on endpoints monitored, not gigabytes ingested.
Absolutely. The Freemium tier is fully functional with no time limit. Paid plans include a 30-day money-back guarantee.
Our zero-knowledge architecture means we never store your data. We're pursuing SOC 2 Type II certification and are GDPR/CCPA compliant by design.