Pricing
The agent is free. What you pay for is the proof.
Protecting an endpoint should not be billed. What carries value is demonstrating to an auditor that your whole fleet applies the same policy, and since when.
Agent
All the masking, on as many machines as you want, with no account to create.
Free
unlimited endpoints
Source available, FSL-1.1-Apache-2.0
What’s included
- Masking and restoration on the endpoint
- French, UK and US locales
- Token and stand-in modes, adjustable secret level
- Policy changeable without a restart, category by category
- AES-256-GCM encrypted session vault
- Routing to eight providers with your own keys
- Streaming responses supported
- Test page, audit mode and offline file scanning
- Menu-bar icon on macOS
- Runs with no backend at all
Fleet
The console that answers the auditor, and the alert that warns you before they do.
€9
per month, up to 10 endpoints
then €0.90 per endpoint per month
What’s included
- Everything in Agent
- Fleet console: active, silent, never seen
- Silent-agent alerting by email or webhook
- What each endpoint actually masks: full, partial or none, with the categories switched off
- Masking counts by category, tokens by model, cache reads and writes kept apart
- Usage cost in euros, from a price table you fill in
- Compliance view: version, locales, mode and secret level per endpoint
- Hash-chained proof log
- CSV and JSONL export, monthly audit report
- Hosted in the European Union
Enterprise
For fleets that IT has to fit into everything else already running.
On request
from 100 endpoints
Annual contract, DPA and security annex
What’s included
- Everything in Fleet
- SAML or OIDC single sign-on
- Roles and scopes per business unit
- Continuous export to your SIEM
- Dedicated instance, EU region of your choice
- Service level agreement and 24/5 support
- Security review and vendor questionnaire
Prices exclude VAT. Billed monthly, no commitment.
Billing questions
- What happens if I stop paying?
- Agents keep masking, exactly as before. You lose the console, the alerting and the proof log — not the protection. The subscription buys the demonstration, never the control itself.
- How is an endpoint counted?
- One enrolled agent, identified by its key. A reinstalled machine re-enrols and replaces the previous entry. The count takes the peak of enrolled machines over the period rather than the closing figure: a fleet of forty that revokes thirty on the last day used forty seats. A machine you no longer use leaves the count when you revoke it from the console, not on its own.
- Do you bill the token cost?
- No. You pay your AI providers directly with your own keys. We convert the reported volumes into euros so you have visibility — it is an indicator, not an invoice.
- Is there a commitment?
- Not on Agent or Fleet. You write to us to cancel and the subscription ends at the close of the current period; self-serve billing and cancellation arrive when we leave beta.