One account subscription. A verified drift incident is the repair unit; individual patched calls never become separate charges.
Provisional plans. No surprise overages.
Internal launch recommendation, not an available offer. Reviewed 2026-10-21; prices, scope and retention remain provisional. Willingness to pay and delivery costs are unvalidated. No seat charges or annual discounts are assumed.
Provisional / Free
Free
$0
USD / account / month
Included allowance
1 verified drift incident / UTC month
Production scope
1 production connection
Cloud history
7 days
Full local Tier 1 detection and observe/shadow proposals.
A production connection is one explicitly configured tenant/vendor authenticated account covering its supported operations; staging does not count toward production limits. Cloud history is proposed customer audit retention, distinct from internal accounting retention. Hosted scope and history enforcement are unqualified.
Universal Tier 1 detection is available locally on every plan, including Free. A paid allowance is not authorization to repair. Detection is off until you configure it.
Free / observe first
Full local detection and shadow proposals, with a provisional small applied-repair allowance. Proposals never execute a write. Local SDKs remain unpublished.
Pro / planned hosted services
Planned hosted sync and alerts; host provisioning and delivery qualification remain required. These are proposed entitlements, not deployed services.
Team & Enterprise / planned
Planned staging comparison, shared review and longer history. Enterprise custom deployment, retention and SLA are unsupported until agreed and qualified.
What counts as an incident?
One distinct finding in a tenant, connection and vendor.operation window with at least one applied repair delivered, complete capture and independent write-integrity confirmation. A payload verification result or 200 response alone cannot establish billability.
Repeated repairs, retries and replays fold into that incident. Per-call patches are not charged separately. Included work has a host-configured per-incident ceiling; overflow stays visible and never creates another charge.
Nonbillable
observe/shadow proposals, drift_halted, drift_blocked, passthrough notifications, bypasses, detection-only findings and truncated captures never bill.
Hard monthly cap
The standing rule is ≤2× base/month without explicit opt-in. Launch recommendations use the stricter base-only cap: $0 Free, $49 Pro or $199 Team per month, with $0 overage charges.
At the limit
No automatic overages. Show an upgrade choice. New paid scope requires explicit consent. No automatic plan change; detection and mandatory semantic protection remain enabled.
These examples explain the provisional packaging. They are not live usage, customer savings or invoices.
One finding, many repaired calls
10,000 delivered, verified repairs of the same finding on one tenant, connection and vendor.operation window count as 1 verified drift incident. Repeated per-call patches add no separate charge.
Pro: 2 verified drift incidents / UTC month. Base and monthly cap: $49 USD. Overage charges: $0.
An allowance limit prompts a choice
3 verified drift incidents in one UTC month exceed the included allowance. The account gets an upgrade choice; no automatic plan change, no automatic overage and no weaker detection or semantic protection.
Pro: 2 verified drift incidents / UTC month. Base and monthly cap: $49 USD. Overage charges: $0.
Team bills monthly; its allowance is quarterly
The included allowance spans a UTC quarter, not a rolling 90-day period and not a fresh allowance each month. The account base is still billed monthly.
Team: 15 verified drift incidents / UTC quarter. Base and monthly cap: $199 USD. Overage charges: $0.
checkout unavailable
Purchasing is unavailable.
Live checkout requires TII-42 and TII-61, approved commercial terms and hosted qualification. No payment is collected here. Durable contact and demo intake is configured separately; forms refuse submissions until a durable destination exists. This page does not submit requests or book calls.