Pricing

Price for life.
No surprises.

The rate you sign up at is the rate you keep — forever.

What that means: the price you subscribe at today is locked in. If we raise our list prices next year, your subscription stays at the original rate. As long as you stay active, it never goes up. It's a commitment, not a promo.

Prices shown in

🇺🇸United StatesUSD

Free

Try it, no strings attached.

Free

No credit card required

Get started →

1 user, 1 agent
10 entries
Three-tier encryption
WebAuthn PRF
All regions

Individual

For solo users and their AI agents.

$1/mo

$12 billed annually — price locked for life

Get started →

1 user, 3 agents
Unlimited entries
Three-tier encryption
WebAuthn PRF
All regions

Family

For your household.

$3/mo

$36 billed annually — price locked for life

Get Family →

Up to 6 users, 18 agents
6 vaults, unlimited entries

Compare every feature

Everything, laid out.

No hidden limits. What you see here is what you get.

Feature	Free	Individual	Family	Teams	Mid-Market	Enterprise
Users & agents
UsersPeople with their own login	1	1	Up to 6	Scales	Scales	Scales
AI agentsClaude Code, Codex, custom	1	3	18 (3/user)	3/user	3/user	3/user
Entries	10	Unlimited	Unlimited	Unlimited	Unlimited	Unlimited
Cross-vault sharingAdd your hardware key to another vault
Encryption tiers
Vault EncryptionEntire vault encrypted at rest, AES-256-GCM
Credential EncryptionAPI keys, OAuth tokens, TOTP, passwords
Identity EncryptionWebAuthn PRF, server cannot decrypt
Agents & integrations
CLICommand-line client for scripts and agents
HTTPS ProxyCredential injection at network layer
Claude Code · Codex · OpenClaw
Scoped agent tokensPer-agent, per-entry access
Clients
Browser extensionChrome, Edge, Brave — planned, not available yet
Mobile appsiOS and Android — planned, not available yet
Password generator
ImportFrom 14 sources
Admin & network
Admin console
Organisation adminAdmin rights over your organisation's accounts
Group-based rotationRotate keys for a team, not an individual. Planned — not available yet
Primary POP choicePoint of Presence — pick your region; your vault lives there
Encrypted replicaA second copy in another city — the same region by default, the far side of the world if you choose; read-only during fail-over
Geo-distributed writesWrites replicate across regions, continue from failover. Planned — not available yet
Security & compliance
Audit logKept for as long as the vault exists
SSH certificate issuancePlanned — not available yet
SSO (SAML / OIDC)Planned — not available yet
SCIM provisioningPlanned — not available yet
HMAC-signed webhooksSOAR / Slack / Teams. Planned — not available yet
Tamper-evident audit logHash-chained; its latest link is recorded off the server
4-eyes recoveryTwo-admin approval for vault recovery
Security review supportWe complete your security questionnaire; our hosting providers' certifications on request
Data Processing AgreementApplies automatically
Business Associate Agreement (HIPAA)Planned — not available yet
Support
Email support	Community	72h	48h	24h	24h	4h
Priority channel (Slack Connect)Planned — not available yet
Dedicated account manager
Named solutions engineer

Flat pricing

What you see is what you pay. No per-action fees, no token counting, no vault-size tiers. Individual is $1/mo, Family is $3/mo.

Teams is $3 per seat; Mid-Market is $6 per seat.

Enterprise is $12 per seat, billed monthly. Prices exclude tax.

No lock-in

Export anytime, cancel in one click. Vault contents export as a signed JSON bundle. Your data is deactivated at the end of your billing period and deleted after 30 days.

No-surprise guarantee

7 days to undo any charge. After any transaction — signup, renewal, or monthly invoice — you can cancel and get a full refund. Self-service, instant, no questions asked.

How billing works

Individual and Family pay once a year — $12 and $36 respectively. Teams, Mid-Market, and Enterprise pay monthly per seat, based on the number of active seats on the 1st of each month. Every plan charges at signup. Your billing cycle starts on the 1st of the following month, and the partial month in between is on us.

Price for life. Your rate is locked the moment you sign up. We may raise prices for new customers. Yours never changes. Not after a year, not after five. We absorb inflation, exchange rate changes, and infrastructure costs. Cancel or stop paying, and the lock is forfeited.

Frequently asked questions

What counts as an "agent"?

Any distinct automated identity that authenticates against your vault — Claude Code running on your laptop, a Codex session on a server, a custom agent. Humans aren't agents; they're users.

What's the difference between Family and Teams?

Family is $3/mo ($36/yr) for up to 6 users and 18 agents — priced for a household that shares trust. Teams is $3/seat/mo with an admin console and organisation admin rights. If you're a team of 2, Family is cheaper. Past 6 users, Teams is the right fit.

When should I pick Mid-Market over Teams?

Teams covers the credential basics — vault, agents, admin console, organisation admin. Mid-Market is where we plan to add the integrations growing orgs and MSP-managed customers expect: SCIM provisioning from your IdP, SSO, SSH certificate issuance, HMAC-signed webhooks and group-based rotation. None of these is available yet; today Mid-Market includes everything in Teams. What the SIEM integration is today →

When should I pick Enterprise over Mid-Market?

Enterprise adds 4-eyes recovery (two admins must approve any vault recovery), security review support (we complete your security questionnaire), a dedicated account manager and 4-hour incident response. Geo-distributed writes and a HIPAA Business Associate Agreement are planned and not available yet. We do not hold SOC 2 or ISO 27001 attestations or certificates. What the SIEM integration is today →

Why not store credentials locally?

Because your agent isn't local. It runs on a server, in a container, across devices. Local storage can't issue scoped tokens, can't replicate across regions, and can't enforce field-level encryption tiers. A vault gives your agent a narrow API surface — it never holds the keys.

Do agents count against the user limit?

No. Users and agents are tracked separately, with their own caps per plan.

What happens if I exceed a plan limit?

Nothing automatic — we won't downgrade you or start charging overages. We'll email you at 90% of a limit and walk you through either upgrading or cleaning up. Your agents keep working.

Do you offer a free trial?

The free tier is the trial — 10 entries, full encryption, all features, no credit card. When you're ready to upgrade, you pay at signup and your billing cycle starts on the 1st of the following month. The partial month in between is free.

How does Mid-Market and Enterprise pricing work?

Mid-Market is $6/seat/mo, Enterprise is $12/seat/mo — published, same for everyone, no quote-only opacity. Both are usage-based and billed monthly in arrears against actual active seats on the 1st of each month (6-seat minimum). For Enterprise, custom SLA terms are scoped in a single call.

Put your credentials out of reach of your agents.

Clavitor keeps vaults at a distance: separate infrastructure, separate trust boundary, geo-redundant replication. Your agents call a narrow API — they never hold the keys.

Get started

Price for life.No surprises.

Free

Individual

Family

Teams

Mid-Market

Enterprise

Everything, laid out.

How billing works

Frequently asked questions

Put your credentials out of reach of your agents.

Price for life.
No surprises.