Capabilities & pricing.
Three plans now, Sovereign coming soon. Every plan sees the whole estate; higher plans turn on control and then proof. Usage is metered in Guard Units, so you pay for the AI traffic you actually govern.
Foundation, Growth and Fortress. Sovereign next.
Foundation shows you where you stand. Growth turns on control. Fortress is the complete platform, and Sovereign brings it inside your own perimeter. Usage is metered in Guard Units and quoted after a briefing on your estate.
Foundation
Illuminate · see your AI
The AI Trust Index, your whole AI estate including shadow AI, peer benchmarking and AI cost. The AI gateway and data security can be added as bridges, so you can try enforcement before moving up.
6 features in full, 9 more to view · try AI Gateway and AI Data Security first
Talk to us about FoundationGrowth
Defend · protect your AI
Turn on control: the AI gateway and Policy Shield, red-team probes, threat intelligence and model supply-chain checks, compliance and evidence, policy generation, incident playbooks and budget fences. Deeper capabilities are available as add-ons.
Everything in Foundation, 19 features in all
Talk to us about GrowthFortress
Command · prove it and scale
Everything, with no add-ons. Adds regulator evidence packs, SIEM integration, chargeback statements and directory provisioning, plus assurance runs and sealed evidence wherever a feature offers them.
All 23 features · no add-ons
Talk to us about FortressSovereign
Your jurisdiction, your perimeter
Everything in Fortress, deployed on-premises or air-gapped and fully data-resident, for government, defence and tier-1 financial services. Peer benchmarking and the live threat feed need a connected deployment.
Fortress, on your own infrastructure
Register interestSimple to buy. Hard to outgrow.
Move up, never re-platform
Each plan includes everything in the one below it, so nothing you set up is lost when you move from Foundation to Growth to Fortress.
Add what you need
Features marked Add-on can be bought on a plan that does not include them, without moving up. On Foundation, AI Gateway & Prompt Firewall and AI Data Security (DLP) can also be switched on as bridges, so you can try enforcement before changing plan.
Fortress has no add-ons
Every feature is included, with assurance runs and sealed evidence wherever a feature offers them.
What each plan includes.
A tick means the feature is in the plan, and “with evidence” adds the assurance runs and sealed exports an auditor can check. View only shows you the findings without acting on them. Add-on means you can buy it without moving up a plan. Fortress includes everything.
| What you get | Foundation | Growth | Fortress | SovereignComing soon |
|---|---|---|---|---|
| Risk & visibility | ||||
| AI Security Score | ✓ | ✓ | ✓ | ✓ |
| Peer Benchmarking | ✓ | ✓ | ✓ | Connected onlyNeeds other tenants to compare against |
| Remediation Roadmap | ✓ | ✓ | ✓ | ✓ |
| AI Estate Discovery | ✓ | ✓ | ✓ | ✓ |
| AI Trust Index | ✓ | ✓ | ✓with evidence | ✓with evidence |
| AI security & guardrails | ||||
| AI Gateway & Prompt Firewall | View onlyor add-on | ✓ | ✓with evidence | ✓with evidence |
| Agentic AI Behaviour Monitor | View only | ✓ | ✓ | ✓ |
| AI Security Threat Intelligence Feed | Add-on | ✓ | ✓with evidence | Connected onlyDraws on online threat feeds |
| AI Governance Policies | View only | ✓ | ✓ | ✓ |
| Enterprise & model integrity | ||||
| Model Threat Simulation / Red-Team | View onlyor add-on | ✓ | ✓with evidence | ✓with evidence |
| Model Supply-Chain SBOM | View onlyor add-on | ✓ | ✓with evidence | ✓with evidence |
| XDR / SIEM Integration | Add-on | Add-on | ✓ | ✓ |
| Data, identity & compliance | ||||
| Compliance & Evidence | — | ✓ | ✓with evidence | ✓with evidence |
| AI Incident Response Playbook Engine | — | ✓ | ✓with evidence | ✓with evidence |
| AI Identity & Access | View onlyor add-on | ✓ | ✓with evidence | ✓with evidence |
| AI Data Security | View onlyor add-on | ✓ | ✓with evidence | ✓with evidence |
| Directory Provisioning (SCIM) & SLA | Add-on | Add-on | ✓ | ✓ |
| FinOps & cost control | ||||
| AI Cost Observability | ✓ | ✓ | ✓ | ✓ |
| Rate-Limit & Budget Control | — | ✓ | ✓ | ✓ |
| Chargeback Statements | Add-on | Add-on | ✓with evidence | ✓with evidence |
| Compliance & evidence | ||||
| Regulator Evidence Packs | Add-on | Add-on | ✓ | ✓ |
| Agentic AI Risk | ||||
| Agentic AI Security | View onlyor add-on | ✓ | ✓with evidence | ✓with evidence |
| Autonomous Integrity | View onlyor add-on | ✓ | ✓with evidence | ✓with evidence |
41 capabilities in 12 pillars.
Every solid node is a capability that ships today, counted from the platform code; the hollow one, Sovereign, is coming soon. Select a node, switch the lens to a framework or a persona, or run any of the 34 scenarios.
Get a quote for your estate.
Tell us what AI you run and how much traffic you expect, and we will size the plan and the Guard Units with you.
Questions buyers ask.
What is a Guard Unit?
The unit the platform meters in. The main meter is an inspected model call at the gateway, by tokens. Some actions, such as issuing evidence packs or integrity passports, are measured first and shown on the burn-down before they are ever charged.
Why are there no prices on this page?
Pricing depends on how much traffic you inspect and which plan you choose, so we quote it after a briefing on your estate.
What does Add-on mean in the feature table?
The feature can be bought on that plan without moving up a plan. View only means the plan shows the feature’s findings but cannot act on them. Fortress includes every feature, with no add-ons.
Is anything in beta?
No. Every capability on this page is generally available. Uploading your own AIBOM to the model SBOM is coming soon.