Pricing · v3.0.0

Detection is free. Coordination is paid. Governance is enterprise.

The Pipelock security engine is free and always will be. Paid plans add multi-agent coordination for teams running many named profiles from one deployment. Enterprise is for fleets that need central governance.

  • Apache 2.0 core
  • No phone home
  • No machine binding
  • 30-day refund
  • Offline license
  • Cancel anytime

Your agent count can 10x. Your bill won’t.

No seats. No per-agent pricing. No per-request metering. A flat rate at every tier.

Community

$0

Forever. No credit card.

Full security engine, one default security profile.

01 Detect

  • 11-layer scanner pipeline, 65 DLP patterns (keys, tokens, PII)
  • MCP scanning: input, response, and tool poisoning
  • Prompt-injection detection across encoding chains
  • SSRF, private-IP, and cloud-metadata blocking

02 Enforce

  • Kill switch with 4 independent sources (fail-closed)
  • Adaptive enforcement + human-in-the-loop approvals
  • MCP tool policy: warn, block, redirect, defer
  • Kernel-enforced egress containment (nftables owner-match)

03 Prove

  • Ed25519-signed decision receipts
  • Free offline verifier (Go, TypeScript, Rust, Python): check any receipt yourself, no server
  • Signed audit reports (HTML, JSON, SARIF)
  • Signed, hot-reloadable rule bundles (28 community rules)

04 Operate

  • Fetch, forward, and WebSocket proxy + MCP (stdio + HTTP)
  • TLS interception + cross-request detection
  • Process sandbox: Landlock + seccomp (Linux + macOS)
  • Core CLI, all 7 presets, Prometheus + OTLP, attack simulation
Get Started

See all capabilities →

Founding Offer

Founding Pro

$49/mo $99/mo

or $490/yr · save $98

★ Grandfathered for life

First 50 customers Founding

Founding price stays for life once claimed.

Many named security profiles under one admin boundary.

Everything in Community

01 Coordination

  • Named security profiles (unlimited)
  • Per-profile DLP, allowlists, rate limits
  • Per-profile mode and enforce overrides
  • Per-profile MCP tool policy
  • Cross-agent session isolation (no cross-agent leakage)

02 Identity & budgets

  • Dedicated agent listeners (spoof-proof)
  • Source CIDR agent resolution
  • Usage budgets (requests, bytes, domains)
  • Per-agent API allowlists and SSRF trusted domains

03 Govern & audit

  • Per-agent behavioral baselines: learn, then lock
  • Per-profile session-profiling thresholds
  • Profile-scoped audit trails and metrics
  • Best-effort email support
Claim Founding Price

For startups, small teams, and solo builders coordinating multiple agent profiles.

Free engine to paid coordination. The same flat rate either way.

Fleet governance

Fleet governance is flat-priced too

Anyone can verify a Fleet Receipt Report with the free Apache binary. Only an Enterprise Conductor can mint one.

For teams that need signed policy distribution, fleet audit aggregation, and procurement evidence. No seats. No per-agent meter. No quote maze.

Enterprise on-ramp

01 Evaluate

$5,000

60 days

Credited toward year one if you sign within 30 days of the eval ending. You walk away with your own signed Fleet Receipt Report either way.

Start a $5k eval

Best on-ramp

02 Design Partner

$15,000

year one

For the first 3 enterprise buyers who want direct input on Conductor, Fleet Receipt Reports, and evidence workflows. Includes the same flat fleet license for year one.

Renews at the published $25,000/year price unless both sides agree otherwise.

Limited to 3 design partners

Become a design partner

03 Annual

$25,000

per year

Flat contract. Your agent count can grow without changing the bill.

Buy annual: $25,000/yr

Everything in Pro, plus fleet governance and signed evidence.

Fleet control

  • Signed policy bundles pushed to every follower
  • One-command rollback
  • Emergency remote kill, M-of-N signed

Evidence and audit

  • Signed fleet report, verified offline with the free binary
  • Durable fleet audit aggregation and query
  • Live stream observability

Ongoing operations

  • Enrollment-token lifecycle and recovery
  • Backup, restore, repair
  • Self-hosted, named entity, async support
  • Async product support with a response target, not an SLA
  • No professional services
  • Self-hosted, no phone home

At a glance

What changes between tiers

Detection is free. Coordination is paid. Governance is enterprise.

FeatureCommunityProEnterprise
11-layer scanner pipelineFullFullFull
MCP proxy + tool scanningFullFullFull
Process sandbox + kill switchFullFullFull
Signed reports (HTML / JSON / SARIF)FullFullFull
Named security profiles1 defaultUnlimitedUnlimited
Per-profile DLP, allowlists, rate limitsNoYesYes
Per-profile mode + enforce overridesNoYesYes
Per-profile MCP tool policyNoYesYes
Usage budgets per profileNoYesYes
Dedicated agent listeners + CIDR resolutionNoYesYes
Per-profile audit trails + Prometheus labelsNoYesYes
Signed fleet policy distributionNoNoYes
Fleet audit aggregation + remote killNoNoYes
Fleet Receipt ReportsNoNoYes
Annual License
Assess License
$999/yr

One-year license for signed security assessment reports. Run pipelock assess against your deployment and get a hash-chained, Ed25519-signed assessment plus an offline-verifiable attestation and badge anyone can re-check with the free verifier.

Get Assess License View demo report

Free Summary

  • Overall letter grade
  • Section scores
  • Top findings summary
  • Pass/fail verdict

Community Forever Promise

Everything that shipped free in v0.3.6 (the last release before paid features) stays free. Period. No clawbacks.

That includes the full scanner pipeline, all proxy modes, MCP protections, TLS interception, kill switch, HITL approvals, audit logging, metrics, reports (HTML, JSON, SARIF), integrity monitoring, all CLI commands from that release, and all presets. If it detects, blocks, scans, or produces signed evidence, it stays free.

Frequently asked questions

What counts as a "security profile"?
A security profile is a named configuration for a specific agent, workflow, or trust boundary. Each profile gets its own DLP patterns, allowlists, rate limits, mode, enforce flag, MCP tool policy, session profiling thresholds, and request budgets. Agents can be identified by dedicated listener ports, source CIDRs, or headers. Community uses one default profile. Pro lets you create as many named profiles as you need. See the Pro reference deployment for the full architecture.
Do licenses phone home?
No. License verification is fully offline using Ed25519 signatures. No network calls, no telemetry, no tracking. The binary verifies the license locally at startup.
Can one license run on multiple machines?
Yes. No machine binding, no hardware fingerprinting. You can deploy Pipelock on as many machines as you need within your licensed scope.
What happens when a license expires?
Agent profiles are disabled. Single-profile protection stays fully active. The proxy keeps protecting traffic, it simply falls back to Community features. No bricking, no lockouts.
Can I try Pro features before buying?
Yes. We offer a guided evaluation path for Pro features. Contact us and we’ll help you test multi-agent coordination in your environment.
What does the Assess license include?
Run pipelock assess against your deployment. The free summary shows your grade, section scores, and top findings. The Assess license ($999/yr) adds server-specific findings, remediation commands, compliance evidence mapped to OWASP, NIST AI RMF, EU AI Act, and SOC 2, and Ed25519-signed evidence bundles. No consulting call required. See sample reports.
What's the difference between Pro and Enterprise?
Scope. Pro coordinates multiple named security profiles under one admin boundary. Enterprise is central fleet governance: Pipelock Conductor distributes signed policy bundles, aggregates fleet audit batches, and supports M-of-N emergency remote kill. Fleet Receipt Reports let procurement and audit teams verify what a whole fleet enforced, offline, with the free Apache binary. Anyone can verify a Fleet Receipt Report; only an Enterprise Conductor can mint one.
How does license renewal work?
Your license token is valid for 45 days. Active subscribers receive a fresh token by email before the current one expires. Run pipelock license install <token> to update and restart pipelock. If your subscription auto-renews, the new token is sent automatically.
What's the refund policy?
30-day money-back guarantee, no questions asked. Annual plans get prorated refunds after 30 days. All refunds processed through Polar. Full refund policy.
How do I manage my subscription?
Log into the Polar customer portal to update your payment method, switch plans, download invoices, or cancel. You can also email luckypipe@pipelab.org and we will handle it for you.

Ready when you are

Start free. Upgrade when you need multi-agent coordination.

Single binary, <30MB, Apache 2.0. Cancel anytime.

Install Free See Proof Talk Enterprise