Pricing Tiers
Four editions of one engine. The differences are capabilities, not throttles on the same binary.
| Tier | Price | For |
|---|---|---|
| Community | $0 / forever | Individual developers on local checkouts |
| Team | $39 / dev / mo | Shared fleets and two-way issue-tracker sync |
| Enterprise | $25k–$60k / year | Multi-tenant RLS, cost routing, adversarial testing |
| Regulated | $100k+ / year | Air-gapped enclaves with signed compliance evidence |
Community
The full deterministic engine: the ten-lane board, worktree isolation, the four-axis budget, acceptance gates and the memory store. Nothing about the execution model is held back.
It runs against a local checkout for one developer, so the multi-tenant machinery simply has nothing to isolate.
Team
Adds the shared control plane — live board sync over server-sent events, fleet pause / resume / concurrency resizing, issue-tracker synchronisation and a serial auto-landing merge queue.
Credential management arrives here: keys are submitted per organisation rather than exported into the process before the board starts.
Enterprise
Multi-tenant row-level security with per-organisation credential scoping and brokered host bindings, so a worker receives a dummy value while the real credential stays in the broker.
Adds dynamic model cost routing with spend caps, coverage-guided fuzzing gates, and SSO / SAML 2.0 with SCIM provisioning.
Regulated
The air-gapped edition. Post-quantum run signing with ML-DSA-65, sealed proof packs, WORM retention, dual-operator approvals and a private model gateway with no outbound telemetry.
This is the tier where the compliance scanners run as gates rather than as reports — and where keychain custody is deliberately off by default, because in a container the mechanism degrades to an unaudited file and a compliance-evidenced control must never switch itself on.
Prices are list prices for the commercial editions. Enterprise and Regulated are scoped per deployment — talk to us about which controls you actually need to evidence.