Priced by log volume and how long you keep it.
No per-employee fees. You pay for the gigabytes of audit data we ingest each month and the retention period you need. Annual billing saves 10%.
Starter
For a first audit cycle
$290/month
- 30 GB ingestion per month
- 1-year retention
- Up to 6 sources
- 2 auditor seats
- Starter detection rules, email alerts
- Evidence packs: CSV, JSON Lines, PDF
- Email support, 1 business day
Growth
Most teamsFor teams with a SIEM and yearly audits
$890/month
- 150 GB ingestion per month
- 3-year retention
- Unlimited sources
- 10 auditor seats
- Custom rules, webhook alerts
- Splunk HEC and Microsoft Sentinel forwarding
- SAML SSO
- Nightly export to your S3 bucket
- 4 business-hour response on ingestion outages
Enterprise
For regulated or multi-entity companies
Contact sales
- Volume ingestion pricing
- Retention up to 7 years
- Unlimited auditor seats
- Data processing agreement and custom terms
- Annual invoicing
- Named support contact
Prices in USD, excluding applicable taxes. Ingestion above your plan's allowance is billed at $0.40 per GB. Trials last 14 days and include up to 5 GB of ingestion.
How the gigabytes are counted
We measure the uncompressed size of each event's JSON when it is ingested. A typical admin event from Microsoft 365 or Okta is 1 to 3 KB, so 30 GB covers roughly 10 to 30 million events a month.
You can see month-to-date ingestion per source on the Usage page and set a soft cap that pauses non-essential sources before overage starts.
Included on every plan
- Unlimited searches and exports
- Unlimited internal user seats
- Hash-chain verification and the CLI
- Raw vendor payload storage
- Full JSON Lines export when you leave
Not included
- Vendor licenses needed for audit logging, such as Microsoft 365 or Google Workspace plans
- Your own SIEM or S3 storage costs
- Running investigations or audits on your behalf
Billing questions
Can I change plans mid-month?
Yes. Upgrades apply immediately and are prorated. Downgrades take effect at the next billing date; retention already purchased is honored for data ingested under it.
What happens if I go over my ingestion allowance?
Ingestion continues and the extra volume is billed at $0.40 per GB on your next invoice. Nothing is dropped.
How do I pay?
Monthly plans are billed by card. Annual Growth and Enterprise plans can be invoiced.
Can I cancel?
Monthly plans can be cancelled at any time and stop renewing at the end of the period. See the Refund Policy for details on annual plans. Refund Policy
Not sure how much log volume you have?
Run the 14-day trial and we will send you a per-source volume estimate before you choose a plan.