Price for life.
No surprises.

Any distinct automated identity that authenticates against your vault — Claude Code running on your laptop, a Codex session on a server, a custom agent. Humans aren't agents; they're users.

Family is $p_family_mo_amt/mo ($p_family_yr_amt/yr) for up to 6 users and 18 agents — priced for a household that shares trust. Teams is $p_teams_seat_amt/seat/mo with an admin console and role-based access. If you're a team of 2, Family is cheaper. Past 6 users, Teams is the right fit.

Teams covers the credential basics — vault, agents, admin console, RBAC. Mid-Market adds the integrations that growing orgs and MSP-managed customers expect: SCIM provisioning from your IdP, SSH certificate issuance, a SIEM pull endpoint, HMAC-signed webhooks, group-based rotation, and a longer audit retention (1 year vs 90 days). If your team has Azure AD, Okta, or any SAML/OIDC provider — and a SIEM you want events in — Mid-Market is the right fit.

Enterprise adds geo-distributed writes with a 99.99% write SLA (writes continue from failover during a regional outage), 4-eyes recovery (two admins must approve any vault recovery), indefinite audit retention with real-time SIEM streaming and tamper-proof signing, SOC 2 Type II, HIPAA BAA, and the option to deploy as a virtual appliance inside your own perimeter. Plus a dedicated account manager and 4-hour incident response.

Because your agent isn't local. It runs on a server, in a container, across devices. Local storage can't issue scoped tokens, can't replicate across regions, and can't enforce field-level encryption tiers. A vault gives your agent a narrow API surface — it never holds the keys.

No. Users and agents are tracked separately, with their own caps per plan.

Nothing automatic — we won't downgrade you or start charging overages. We'll email you at 90% of a limit and walk you through either upgrading or cleaning up. Your agents keep working.

The free tier is the trial — 10 entries, full encryption, all features, no credit card. When you're ready to upgrade, you pay at signup and your billing cycle starts on the 1st of the following month. The partial month in between is free.

Mid-Market is $p_mid_market_seat_amt/seat/mo, Enterprise is $p_enterprise_seat_amt/seat/mo — published, same for everyone, no quote-only opacity. Both are usage-based and billed monthly in arrears against actual active seats on the 1st of each month (6-seat minimum). For Enterprise, add-ons like virtual appliance deployment and custom SLA terms are scoped in a single call.