Pricing
Free forever. Pay only for scale.
Trust floor identical on every tier. Pay only when you need the operational wrapper.
14-day Pro trial · no card · no account
$0Forever · no card
$20Pro · per month
$40Teams · per seat
75%Typical AI-spend cut
BYOK math
Drag the slider — see the bill.
Annual AI spend
50 engineers
Annual saving
~75% lower
$0/yr
Compare
Every capability, by tier.
| Capability | IndividualFree · forever | Pro$20 / mo | Teams$40 / user · mo | EnterpriseCustom |
|---|---|---|---|---|
| Foundation · every tier, forever | ||||
| BYOK every provider (OpenAI · Anthropic · Google · Groq · Cerebras · xAI · DeepSeek · Azure · NVIDIA · Ollama · LM Studio) | ||||
| Native shell (PTY) · agent · sub-agents · per-call approval | ||||
| 83 bundled skills · Code Graph · Memory Tree | ||||
| MCP · GitHub · K8s · AWS · SSH | ||||
| Hash-chained audit log (local, read-only) | ||||
| Built-in secret deny-list (~30 patterns) | ||||
| Manual encrypted export / import · session sharing | ||||
| No account · no telemetry · clean uninstall | ||||
| Pro · power user | ||||
| Strict + Paranoid approval presets | — | |||
| Custom path deny-list | — | |||
| Audit-log export + hash verification | — | |||
| Deep session search (/history) | — | |||
| 2 concurrent personal devices | — | n/a | n/a | |
| E2E-encrypted sync (PBKDF2 + AES-256-GCM) | — | |||
| Cross-seat session handoff (1h TTL, ed25519-signed) | — | |||
| Parallel + background agents · checkpoint / replay | limited | |||
| Teams · fleet governance | ||||
| DLP secret-egress guard | — | — | ||
| Provider allowlist (fleet-wide) | — | — | ||
| Agent capability sandbox | — | — | ||
| Org policy file (MDM-friendly) | — | — | ||
| Shared team MCP registry | — | — | ||
| Admin web console (magic-link · 15-min · IP-tied) | — | — | ||
| Seats panel · revoke / restore / hard-delete | — | — | ||
| Members panel · invite by email · roles | — | — | ||
| Spend panel (per-seat / per-provider · CSV) | — | — | ||
| Anomaly alerts (Slack · Discord · MS Teams) | — | — | ||
| SCIM 2.0 (Okta · Azure AD · OneLogin) | — | — | ||
| SAML 2.0 SP · full XML-DSig verify | — | — | ||
| Per-license Bearer API tokens (CI/scripts) | — | — | ||
| Enterprise / Gov · sovereignty + compliance | ||||
| PIV / CAC smart-card auth (RSA-SHA256 + ECDSA-SHA256) | — | — | — | |
| FIPS 140-3 allowlist evaluator | — | — | — | |
| Self-hosted license issuer · customer KMS | — | — | — | |
| Air-gap policy gate | — | — | — | |
| Revocation list (5-min CDN TTL · ed25519-signed) | — | — | — | |
| SOC 2 / HIPAA / PCI / ISO-27001 evidence bundle | — | — | — | |
| SBOM (CycloneDX 1.5 · ed25519-signed) | — | — | — | |
| SIEM export — signed JSONL · paginated | — | — | — | |
| FIPS-compliant build artifact | — | — | — | roadmap |
| OpenTelemetry-protocol bridge | — | — | — | roadmap |
| OEM / embeddable SDK · sub-license | — | — | — | roadmap |
| Named support engineer · SLA · custom contract | — | — | — | |
shipped
roadmap · per ops spec
not in this tier
Six honest answers
The questions everyone asks.
Free = the whole product
Same agent, same tools. Paid tiers add control, never remove features.
We see nothing
BYOK goes machine → provider. Sync is E2E. Worker holds only ciphertext.
Teams unlocks governance
Seats · spend · DLP · SCIM + SAML · org policy · MCP registry.
No AI markup, ever
Your provider key, your bill, their terms. We never proxy.
Trial Teams via Polar
Buy 5 seats. Run the full admin loop. Standard Polar terms.
Shipped vs roadmap
PIV · FIPS · SBOM · SIEM live. OEM SDK on roadmap. Honest about both.
Free is the floor. Pay only for control.
14-day Pro trial · no card · no account