Pricing
Priced Like Endpoint Security, Not Like AI Security
Shadow AI discovery, AI session monitoring, and secrets detection, with endpoint protection included, on a single per-endpoint line item. Billed monthly in advance for the endpoints active on your billing date.
Team
Startups and small teams
$9
per endpoint / month
5 endpoints minimum
- AI tool discovery (48 tools by name)
- 365-day session retention
- SSO (OpenID Connect), MFA, and SCIM provisioning
- Secret detection and remote redaction
- Malware detection + IOC matching
- MCP server governance
- Custom policies + data egress monitoring
- Sigma behavioral detection and FIM
- Dependency vulnerability scanning
- Compliance dashboards + evidence export
- AI Register (EU AI Act)
Most Popular
Business
Mid-market and compliance-driven orgs
$19
per endpoint / month
5 endpoints minimum
- Everything in Team
- Response actions and playbooks
- Priority email and chat support
Enterprise
Large organizations with custom SLAs
Custom
annual agreement
100 endpoints minimum
- Everything in Business
- Annual and volume pricing
- Custom retention
- All frameworks + custom controls
- Dedicated customer success manager
- Custom SLA
| Feature | Team | Business | Enterprise |
|---|---|---|---|
| AI tool discovery (48 tools by name) | Yes | Yes | Yes |
| AI session monitoring & replay | 365-day retention | 365-day retention | Custom retention |
| Secret detection in AI conversations | Yes | Yes | Yes |
| Remote secret redaction | Yes | Yes | Yes |
| Real-time policy enforcement | Custom policies | Custom + templates | Custom + templates |
| MCP server governance | Yes | Yes | Yes |
| Malware detection (native + YARA) | Yes | Yes | Yes |
| IOC matching | Yes | Yes | Yes |
| Behavioral / Sigma detection | Yes | Yes | Yes |
| File integrity monitoring | Yes | Yes | Yes |
| Dependency vulnerability scanning | Yes | Yes | Yes |
| Data egress monitoring | Yes | Yes | Yes |
| Response actions & playbooks | None | Yes | Yes |
| Compliance dashboards | SOC 2, ISO 27001, NIST | SOC 2, ISO 27001, NIST | All frameworks + custom |
| Compliance evidence export | Yes | Yes | Yes |
| AI Register (EU AI Act) | Yes | Yes | Yes |
| SSO via OpenID Connect (Entra ID, Okta, Google Workspace) | Yes | Yes | Yes |
| MFA (passkeys, TOTP, recovery codes) | Yes | Yes | Yes |
| SCIM 2.0 user provisioning | Yes | Yes | Yes |
| Support | Priority email + chat | Dedicated CSM | |
| SLA | None | None | Custom |
| Billing | Monthly, in advance | Monthly, in advance | Annual invoice |
| Available on AWS Marketplace | Yes | Yes | Talk to Sales |
14-day free trial on every self-serve tier, full-featured, no credit card to start. After the trial, you are charged monthly in advance for the endpoints active on your billing date, with a 5-endpoint minimum. Endpoints added during the month are billed from the next billing date.
Kraitos AIDR is also available on AWS Marketplace. Subscribe there to have Team or Business metered per protected device per day and billed to your AWS account, with the same 14-day free trial included. View the AWS Marketplace listing.
Why We Price This Way
Three Categories, Three Price Points, One Gap
EDR is priced per endpoint and does not look inside AI sessions. AI security runs from a few dollars per user per month for browser- or DNS-based discovery to custom enterprise contracts for model-layer gateways, and neither ships an endpoint agent. Compliance platforms are priced per company and cover neither.
| Vendor or category | Category | Model | Range |
|---|---|---|---|
| CrowdStrike Falcon | EDR | Per endpoint / mo | $5–15 |
| SentinelOne Singularity | EDR | Per endpoint / mo | $7–19 |
| Prompt Security | AI security (proxy) | Custom enterprise | Est. $25K–75K/yr |
| Protect AI | ML pipeline security | Custom enterprise | Est. $25K–100K+/yr |
| CalypsoAI (F5) | AI gateway | Custom enterprise | Not disclosed |
| Lakera | LLM firewall | Usage-based API | Free tier + custom |
| Vanta | Compliance automation | Per company / yr | $10K–80K/yr |
| Drata | Compliance automation | Per company / yr | $15K–100K/yr |
| Browser- and DNS-based AI discovery tools (category) | AI usage visibility | Per user / mo | Roughly $1–5 |
Browser- and DNS-based discovery tools show which AI apps are in use. Kraitos AIDR runs on the endpoint and sees what happens inside the session - secrets, MCP servers, local models, coding agents - and can redact. It puts AI detection and response and EDR-class endpoint protection in a single agent on a single per-endpoint line item: the pricing model of endpoint security, applied to a problem that otherwise takes several contracts to cover.
Competitor pricing reflects publicly available list pricing and published market estimates as of 2026, and is provided for category context rather than as a quote.
FAQ
Questions About Pricing
What counts as an endpoint?
Any device where the Kraitos agent is enrolled and has reported to the dashboard at least once. Devices you decommission in the dashboard stop counting from the next billing date. If a decommissioned device starts reporting again, it is counted again from the following billing date.
How does billing work?
Self-serve plans are billed monthly, in advance. On each billing date you are charged for the endpoints active in your account that day, with a minimum of 5 endpoints on Team and Business. Endpoints added during the month are billed from the next billing date. Endpoints removed during the month are not credited or prorated.
What happens after the free trial?
The trial runs 14 days with full features and no credit card to start, and the 5-endpoint minimum does not apply during it. When the trial ends, your first monthly charge is billed to the payment method on file. If there is no payment method on file, dashboard access is suspended until you add one. Your endpoints keep being monitored for 30 days after that; if the account is still unpaid after 30 days it is closed and its data is scheduled for deletion under our Terms of Service.
Can I switch tiers?
Yes, at any time. A tier change takes effect on your next billing date. There is no migration step and nothing to reinstall.
What is the data retention by tier?
AI session data is retained 365 days on Team and Business, and on a custom schedule for Enterprise. Compliance evidence and audit logs follow their own retention policy.
Is there an annual commitment?
No. Team and Business are month to month with no annual commitment; cancel before your next billing date and you will not be charged again. Annual terms and volume pricing are available on Enterprise agreements. Talk to Sales if you want either.
How does MSP or multi-tenant pricing work?
The platform supports full multi-tenant isolation at the ORM, middleware, database row-level security, and permission layers, so MSSPs and MSPs manage multiple clients from one platform. Contact us for MSP terms.
Do you offer nonprofit or education pricing?
Contact us - platform administrators can set per-tenant unit prices, device caps, and invoice terms.
How do I pay?
Team and Business are charged monthly to a card through Stripe, or you can subscribe through AWS Marketplace and have the charges billed to your AWS account. Enterprise agreements are billed by invoice. For card billing, payment methods and invoices are managed in the dashboard.
Is Kraitos AIDR available on AWS Marketplace?
Yes. Team and Business are available as a SaaS listing on AWS Marketplace. Marketplace subscriptions are usage-based, metered per protected device per day, and charged through your AWS bill rather than a card. The 14-day free trial is included. Enterprise and annual agreements are handled by Sales.
Start a Trial or Talk Through the Numbers
Every self-serve tier starts with a 14-day full-feature trial, no credit card to start.
[email protected]kraitos.io