Pricing

Priced on the work the layer does, one authorisation decision at a time, not on the number of products. Every plan includes the full pipeline.

Starter

For teams putting their first agents into production, with every action on record.

What you get
Up to 5 registered agents, 3 seatsFull pipeline: intercept, identify, authorise, decide, recordDeterministic and semantic policiesAuthorisation receipts on every decisionShadow mode and backtestingPython and TypeScript SDKsXybern Cloud, 90-day vault retention
Book a Security Assessment
Growth

For teams running agents across systems, with humans in the loop on the decisions that matter.

Everything in Starter, plus
Up to 50 registered agents, 15 seatsMandates & Charter, Intent Contracts, Access ProfilesRisk Verdict and escalations with human reviewTemporal windows and signed webhooksXybern Redact across every layerSelf-hosted relay for local enforcementSSO, 12-month vault retention, priority support
Book a Security Assessment
Enterprise

For regulated environments with residency, isolation, air-gap, or cross-organisation needs.

Everything in Growth, plus
Unlimited agents and seatsDedicated Environment or Sovereign Deployment (on-premise, private cloud, air-gapped)Data residency: Saudi Arabia (Saudi Private), your boundary (Sovereign), US (Cloud)Runtime containment and kill switchCustom mandate authoringSSO on request, unlimited retention, 99.9% SLA, named engineer
Talk to us
FeaturesStarterGrowthEnterprise
Volume
Authorisation decisions included 50k / mo 500k / mo Committed
Registered agents 5 50 Unlimited
Seats 3 15 Unlimited
Workspaces 1 Unlimited Unlimited
Enforcement & records
Deterministic and semantic policies
Scoped, time-bound delegation
Shadow mode and backtesting
Mandates & Charter×
Intent Contracts×
Access Profiles×
Risk Verdict×
Escalations and human review×
Breakglass protocol××
Runtime containment and kill switch××
Provenance Vault retention 90 days 12 months Unlimited
Add-ons
Agent-to-agent authorisationAdd-onAdd-onAdd-on
Cross-organisation federationAdd-onAdd-onAdd-on
MCP gatewayAdd-onAdd-onAdd-on
Xybern RedactAdd-on
Deployment and support
Xybern Cloud (fully managed)
Dedicated Environment××
Sovereign Deployment (on-premise, private cloud, air-gapped)××
Self-hosted relay (local enforcement)×
Data residency (US, Saudi, sovereign)××
SSO (SAML / OIDC)× SSO SSO
Support Email Priority Named engineer
SLA× 99.5% 99.9%
Book a Security AssessmentBook a Security AssessmentTalk to us

Not sure which plan fits?

Tell us how many agents you run and what they are allowed to touch, and we will size it with you.