Pricing
Priced Like Endpoint Security, Not Like AI Security
AI governance, data loss prevention, and endpoint protection on a single per-endpoint line item - instead of a $25K+ AI security contract, a compliance platform, and an EDR renewal. Billed monthly in advance for the endpoints active on your billing date.
Team
Startups and small teams
$9
per endpoint / month
5 endpoints minimum
- AI tool discovery (14+ tools)
- 30-day session retention
- Secret detection and remote redaction
- Malware detection + IOC matching
- MCP server governance
- Custom policies + data egress monitoring
- Sigma behavioral detection and FIM
- Dependency vulnerability scanning
Most Popular
Business
Mid-market and compliance-driven orgs
$19
per endpoint / month
5 endpoints minimum
- Everything in Team
- 90-day session retention
- Response actions and playbooks
- Compliance dashboards + evidence export
- AI Register (EU AI Act)
- API access, SSO / SAML, 99.9% uptime SLA
Enterprise
Large organizations with custom SLAs
Custom
annual agreement
100 endpoints minimum
- Everything in Business
- Annual and volume pricing
- Custom retention
- All frameworks + custom controls
- Custom policies and API integration
- Dedicated customer success manager
- Custom SLA
| Feature | Team | Business | Enterprise |
|---|---|---|---|
| AI tool discovery (14+ tools) | Yes | Yes | Yes |
| AI session monitoring & replay | 30-day retention | 90-day | Custom |
| Secret detection in AI conversations | Yes | Yes | Yes |
| Remote secret redaction | Yes | Yes | Yes |
| Real-time policy enforcement | Custom policies | Custom + templates | Custom + API |
| MCP server governance | Yes | Yes | Yes |
| Malware detection (native + YARA) | Yes | Yes | Yes |
| IOC matching | Yes | Yes | Yes |
| Behavioral / Sigma detection | Yes | Yes | Yes |
| File integrity monitoring | Yes | Yes | Yes |
| Dependency vulnerability scanning | Yes | Yes | Yes |
| Data egress monitoring | Yes | Yes | Yes |
| Response actions & playbooks | None | Yes | Yes |
| Compliance dashboards | None | SOC 2, ISO 27001, NIST | All frameworks + custom |
| Compliance evidence export | None | Yes | Yes |
| AI Register (EU AI Act) | None | Yes | Yes |
| API access | None | Yes | Yes |
| SSO / SAML | None | Yes | Yes |
| Support | Priority email + chat | Dedicated CSM | |
| SLA | None | 99.9% uptime | Custom |
| Billing | Monthly, in advance | Monthly, in advance | Annual invoice |
| Available on AWS Marketplace | Yes | Yes | Talk to Sales |
14-day free trial on every self-serve tier, full-featured, no credit card required. After the trial, you are charged monthly in advance for the endpoints active on your billing date, with a 5-endpoint minimum. Endpoints added during the month are billed from the next billing date.
Kraitos AIDR is also available on AWS Marketplace. Subscribe there to have Team or Business metered per protected device per day and billed to your AWS account, with the same 14-day free trial included. View the AWS Marketplace listing.
Why We Price This Way
Three Categories, Three Price Points, One Gap
EDR incumbents charge $5–19 per endpoint with zero AI governance. AI security startups charge $25K+ ACV with zero endpoint protection. Compliance platforms charge $10K–80K per year and cover neither.
| Vendor | Category | Model | Range |
|---|---|---|---|
| CrowdStrike Falcon | EDR | Per endpoint / mo | $5–15 |
| SentinelOne Singularity | EDR | Per endpoint / mo | $7–19 |
| Prompt Security | AI security (proxy) | Custom enterprise | Est. $25K–75K/yr |
| Protect AI | ML pipeline security | Custom enterprise | Est. $25K–100K+/yr |
| CalypsoAI (F5) | AI gateway | Custom enterprise | Not disclosed |
| Lakera | LLM firewall | Usage-based API | Free tier + custom |
| Vanta | Compliance automation | Per company / yr | $10K–80K/yr |
| Drata | Compliance automation | Per company / yr | $15K–100K/yr |
No one bundles all three. Kraitos AIDR is AI governance, DLP, and EDR-class endpoint protection in a single agent on a single per-endpoint line item - the pricing model of endpoint security, applied to a problem that otherwise costs three contracts to cover.
Competitor pricing reflects publicly available list pricing and published market estimates as of 2026, and is provided for category context rather than as a quote.
FAQ
Questions About Pricing
What counts as an endpoint?
Any device where the Kraitos agent is enrolled and has reported to the dashboard at least once. Devices you decommission in the dashboard stop counting from the next billing date. If a decommissioned device starts reporting again, it is counted again from the following billing date.
How does billing work?
Self-serve plans are billed monthly, in advance. On each billing date you are charged for the endpoints active in your account that day, with a minimum of 5 endpoints on Team and Business. Endpoints added during the month are billed from the next billing date. Endpoints removed during the month are not credited or prorated.
What happens after the free trial?
The trial runs 14 days with full features and no credit card, and the 5-endpoint minimum does not apply during it. When the trial ends, your first monthly charge is billed to the payment method on file. If there is no payment method on file, dashboard access is suspended until you add one. Your endpoints keep being monitored for 30 days after that; if the account is still unpaid after 30 days it is closed and its data is scheduled for deletion under our Terms of Service.
Can I switch tiers?
Yes, at any time. A tier change takes effect on your next billing date. There is no migration step and nothing to reinstall.
What is the data retention by tier?
AI session data is retained 30 days on Team, 90 days on Business, and on a custom schedule for Enterprise. Compliance evidence and audit logs follow their own retention policy.
Is there an annual commitment?
No. Team and Business are month to month with no annual commitment; cancel before your next billing date and you will not be charged again. Annual terms and volume pricing are available on Enterprise agreements. Talk to Sales if you want either.
How does MSP or multi-tenant pricing work?
The platform supports full multi-tenant isolation at the ORM, middleware, database row-level security, and permission layers, so MSSPs and MSPs manage multiple clients from one platform. Contact us for MSP terms.
Do you offer nonprofit or education pricing?
Contact us - platform administrators can set per-tenant unit prices, device caps, and invoice terms.
How do I pay?
Team and Business are charged monthly to a card through Stripe, or you can subscribe through AWS Marketplace and have the charges billed to your AWS account. Enterprise agreements are billed by invoice. For card billing, payment methods and invoices are managed in the dashboard.
Is Kraitos AIDR available on AWS Marketplace?
Yes. Team and Business are available as a SaaS listing on AWS Marketplace. Marketplace subscriptions are usage-based, metered per protected device per day, and charged through your AWS bill rather than a card. The 14-day free trial is included. Enterprise and annual agreements are handled by Sales.
Start a Trial or Talk Through the Numbers
Every self-serve tier starts with a 14-day full-feature trial, no credit card required.
[email protected]kraitos.io