Pricing
One list. Priced per governed agent.
Every tier includes the full policy engine, hash-chained audit trail, and every enforcement surface — MCP, LLM proxy (prompt + response), CLI hook, and Lens. You pay for how many agent identities you govern, not which features you unlock.
Free
Up to 3 agents
For individual devs, POCs, and internal tinkering.
- ·Full policy engine — allow, block, approve, prove
- ·Hash-chained audit trail
- ·MCP + LLM proxy + CLI hook + Lens enforcement
- ·Community support (GitHub Discussions)
Team
Up to 25 agents
For engineering teams governing their first fleet of agents.
- ·Everything in Free
- ·Slack + email approval fanout
- ·Signed evidence exports
- ·Slack + email support (business hours)
- ·SSO (Google, Microsoft, Okta)
Business
25–100 agents
Volume pricing for orgs standardising governance across many agents.
- ·Everything in Team
- ·Priority support (24h response)
- ·Custom policy pack authoring
- ·Role-based access control (RBAC)
- ·Compliance evidence templates (SOC2, ISO, HIPAA)
Enterprise
100+ agents · Self-hosted · Air-gapped (design partners)
For regulated industries, self-host, and design-partner engagements.
- ·Everything in Business
- ·Self-hosted deployment (Docker shipped; Kubernetes preview; air-gapped design partner program)
- ·Signed SLA + dedicated success engineer
- ·Custom policy development
- ·Procurement, security review, and MSA support
Self-hosted? Same list price. Same features.
Docker self-hosted is available on Enterprise today. Kubernetes reference templates are in preview and air-gapped installs are running with design partners. The list price is the same as SaaS — you're paying for policy enforcement, audit, and support, not for where the pods run. Deploy where your compliance boundary needs it, keep the same commercial terms.
One engine — every surface
MCP tool interception, LLM proxy (prompt + response gates), CLI hooks, and Lens chat all run through the same policy engine and write to the same audit chain.
One agent identity
Every governed agent gets a cond_agt_* identity with RBAC, TTL, rate + spend caps. That identity is the unit you pay for.
Bring your own LLM
Native routes for Anthropic + OpenAI, and OpenRouter passthrough for the long tail. Add more via the LiteLLM SDK matrix — see the deployment page for the certified operation list. No provider markup.
Answers to the questions every buyer asks.
Direct answers so you don't need a sales call to scope the deal. If your situation doesn't fit one of these, reach out and we'll answer the same way.
Is cond_agt_* priced per user or per bot?
Per bot — per governed service identity. One human developer running three governed agents counts as three identities. The unit tracks value produced by the agents, not headcount using the tool.
Does self-hosted include air-gapped deployments?
Docker self-hosted ships today; Kubernetes reference templates are in preview; fully air-gapped installs are running with design partners and not yet generally available. Same image, same policy engine, same list price as SaaS — you’re paying for enforcement and audit, not where the pods run. Talk to us if you need the air-gapped track before it opens up.
What if my agent count varies month to month?
Billed on the peak count of active identities in each month. Spin agents up for a launch, retire them after, and you only pay for the month you actually ran them. No proration penalty for scaling down.
Do you offer annual discounts?
Yes — 15% off list price on all tiers when paid annually up front. Available on Team, Business, and Enterprise. Ask for the annual quote when you talk to us.
What happens if I hit my tier cap?
Soft alert at 90% of cap so you can plan the upgrade. If you hit 100%, agents keep working — we auto-upgrade you to the next tier and send a confirmation email. No hard stops, no surprise blocks, no missed enforcement.
How is our data stored and processed when it passes through third-party LLMs?
Every call flows through the Conduct proxy first: workspace-scoped vault keys (no shared credentials), pre-flight redaction of PII, secrets, and path prefixes, and a policy check that decides allow / block / approve / audit before the request leaves your perimeter. Every decision writes a SHA-256 hash-chained audit receipt. Deployment options: SaaS shipped, Docker self-hosted shipped, Kubernetes preview, air-gapped design partner program.
What happens to our margins when model prices jump 2–3× overnight?
Zero direct exposure. Customers bring their own model keys — Conduct never resells tokens. We charge per governed decision, not per token, so model price swings do not move your unit economics. Cross-provider routing is native: if one vendor spikes, workspace policy can route to a cheaper equivalent without any application change.
What happens if Claude Code, OpenAI, or Microsoft ships a native version of this?
Vendor-native governance is single-vendor by definition — Anthropic will not ship enforcement for OpenAI models, OpenAI will not ship it for Anthropic, and neither will govern the MCP tools your agents actually call. Conduct is the cross-cutting layer: one policy across every model, agent, and tool your enterprise runs. That heterogeneity is structural, not a feature race.
Why leave the major platforms for you?
One policy across N vendors, M agents, and K tools — a scope no single platform can offer without cannibalizing itself. Hash-chained audit that legal and SOC 2 auditors accept as evidence. Apache-2.0 core with patent-pending enforcement (US 64/109,502), so if we disappear tomorrow the runtime keeps running. Vendor logs are marketing; hash-chained receipts are proof.
Not sure which tier fits?
Start on Free — govern up to 3 agents in an afternoon. Upgrade when your fleet grows, or talk to us about design-partner terms if you're deploying at scale early.
