Pricing

Price for life.
No surprises.

The rate you sign up at is the rate you keep — forever.

What that means: the price you subscribe at today is locked in. If we raise our list prices next year, your subscription stays at the original rate. As long as you stay active, it never goes up. It's a commitment, not a promo.

Prices shown in

🇺🇸United StatesUSD

Free

Try it, no strings attached.

Free

No credit card required

Get started →

1 user, 1 agent
10 entries
Three-tier encryption
WebAuthn PRF
All regions

Individual

For solo users and their AI agents.

$1/mo

$12 billed annually — price locked for life

1 user, 3 agents
Unlimited entries
Three-tier encryption
WebAuthn PRF
All regions

Family

For your household.

$3/mo

$36 billed annually — price locked for life

Up to 6 users, 18 agents
6 vaults, unlimited entries

Compare every feature

Everything, laid out.

No hidden limits. What you see here is what you get.

Feature	Free	Individual	Family	Teams	Mid-Market	Enterprise
Users & agents
UsersPeople with their own login	1	1	Up to 6	Scales	Scales	Scales
AI agentsClaude Code, Codex, custom	1	3	18 (3/user)	3/user	3/user	3/user
Entries	10	Unlimited	Unlimited	Unlimited	Unlimited	Unlimited
Cross-vault sharingAdd your hardware key to another vault
Encryption tiers
Tier 1 · VaultEntire vault encrypted at rest, AES-256-GCM
Tier 2 · CredentialAPI keys, OAuth tokens, TOTP, passwords
Tier 3 · IdentityWebAuthn PRF, server cannot decrypt
Agents & integrations
CLI + SDKs
HTTPS ProxyCredential injection at network layer
MCP — notes & memoryAI agents store and retrieve encrypted notes
MCP — credential accessScoped proxy layer, capability-by-reference
Claude Code · Codex · OpenClaw
Scoped agent tokensPer-agent, per-entry access
TOTP generation for agents
Clients
Browser extensionChrome, Firefox, Safari, Edge, Brave
Mobile appsiOS and Android
Password generator
ImportFrom 14 sources
Admin & network
Admin console
Role-based access control
Group-based rotationRotate keys for a team, not an individual
Primary POP choicePoint of Presence — pick your region; your vault lives there
Encrypted geo-redundant replicationAutomatic fail-over copy on the opposite side of the world
Geo-distributed writesWrites replicate across regions, continue from failover
Read availability SLA	99.99%	99.99%	99.99%	99.99%	99.99%	99.99%
Write availability SLA						99.99%
Security & compliance
Audit log retention	7 days	30 days	90 days	90 days	1 year	Indefinite
SSH certificate issuance
SSO (SAML / OIDC)
SCIM provisioning
SIEM pull endpointJSON / NDJSON, cursor-based
Real-time SIEM streaming
HMAC-signed webhooksSOAR / Slack / Teams
Tamper-proof audit signing
4-eyes recoveryTwo-admin approval for vault recovery
SOC 2 Type II report
HIPAA BAA / DPA
Virtual appliance / DockerRun Clavitor inside your own perimeter
Support
Email support	Community	72h	48h	24h	24h	4h
Priority channel (Slack Connect)
Dedicated account manager
Named solutions engineer

Flat pricing

What you see is what you pay. No per-action fees, no token counting, no vault-size tiers. Individual is $1/mo. Family is $3/mo. Teams ($3), Mid-Market ($6), and Enterprise ($12) are per-seat monthly rates. Prices exclude tax.

No lock-in

Export anytime, cancel in one click. Vault contents export as a signed JSON bundle. Your data is deactivated at the end of your billing period and deleted after 30 days.

No-surprise guarantee

7 days to undo any charge. After any transaction — signup, renewal, or monthly invoice — you can cancel and get a full refund. Self-service, instant, no questions asked.

How billing works

Individual and Family pay once a year — $12 and $36 respectively. Teams, Mid-Market, and Enterprise pay monthly per seat, based on the number of active seats on the 1st of each month. Every plan charges at signup. Your billing cycle starts on the 1st of the following month, and the partial month in between is on us.

Price for life. Your rate is locked the moment you sign up. We may raise prices for new customers. Yours never changes. Not after a year, not after five. We absorb inflation, exchange rate changes, and infrastructure costs. Cancel or stop paying, and the lock is forfeited.

Frequently asked questions

What counts as an "agent"?

Any distinct automated identity that authenticates against your vault — Claude Code running on your laptop, a Codex session on a server, a custom agent. Humans aren't agents; they're users.

What's the difference between Family and Teams?

Family is $3/mo ($36/yr) for up to 6 users and 18 agents — priced for a household that shares trust. Teams is $3/seat/mo with an admin console and role-based access. If you're a team of 2, Family is cheaper. Past 6 users, Teams is the right fit.

When should I pick Mid-Market over Teams?

Teams covers the credential basics — vault, agents, admin console, RBAC. Mid-Market adds the integrations that growing orgs and MSP-managed customers expect: SCIM provisioning from your IdP, SSH certificate issuance, a SIEM pull endpoint, HMAC-signed webhooks, group-based rotation, and a longer audit retention (1 year vs 90 days). If your team has Azure AD, Okta, or any SAML/OIDC provider — and a SIEM you want events in — Mid-Market is the right fit.

When should I pick Enterprise over Mid-Market?

Enterprise adds geo-distributed writes with a 99.99% write SLA (writes continue from failover during a regional outage), 4-eyes recovery (two admins must approve any vault recovery), indefinite audit retention with real-time SIEM streaming and tamper-proof signing, SOC 2 Type II, HIPAA BAA, and the option to deploy as a virtual appliance inside your own perimeter. Plus a dedicated account manager and 4-hour incident response.

Why not store credentials locally?

Because your agent isn't local. It runs on a server, in a container, across devices. Local storage can't issue scoped tokens, can't replicate across regions, and can't enforce field-level encryption tiers. A vault gives your agent a narrow API surface — it never holds the keys.

Do agents count against the user limit?

No. Users and agents are tracked separately, with their own caps per plan.

What happens if I exceed a plan limit?

Nothing automatic — we won't downgrade you or start charging overages. We'll email you at 90% of a limit and walk you through either upgrading or cleaning up. Your agents keep working.

Do you offer a free trial?

The free tier is the trial — 10 entries, full encryption, all features, no credit card. When you're ready to upgrade, you pay at signup and your billing cycle starts on the 1st of the following month. The partial month in between is free.

How does Mid-Market and Enterprise pricing work?

Mid-Market is $6/seat/mo, Enterprise is $12/seat/mo — published, same for everyone, no quote-only opacity. Both are usage-based and billed monthly in arrears against actual active seats on the 1st of each month (6-seat minimum). For Enterprise, add-ons like virtual appliance deployment and custom SLA terms are scoped in a single call.

Put your credentials out of reach of your agents.

Clavitor keeps vaults at a distance: separate infrastructure, separate trust boundary, geo-redundant replication. Your agents call a narrow API — they never hold the keys.

Get started

Price for life.No surprises.

Free

Individual

Family

Teams

Mid-Market

Enterprise

Everything, laid out.

How billing works

Frequently asked questions

Put your credentials out of reach of your agents.

Price for life.
No surprises.