Priced on the work the layer does, one authorisation decision at a time, not on the number of products. Every plan includes the full pipeline.
For teams putting their first agents into production, with every action on record.
For teams running agents across systems, with humans in the loop on the decisions that matter.
For regulated environments with residency, isolation, air-gap, or cross-organisation needs.
| Features | Starter | Growth | Enterprise |
|---|---|---|---|
| Volume | |||
| Authorisation decisions included | 50k / mo | 500k / mo | Committed |
| Registered agents | 5 | 50 | Unlimited |
| Seats | 3 | 15 | Unlimited |
| Workspaces | 1 | Unlimited | Unlimited |
| Enforcement | |||
| Deterministic and semantic policies | |||
| Scoped, time-bound delegation | |||
| Shadow mode and backtesting | |||
| Mandates & Charter | × | ||
| Intent Contracts | × | ||
| Access Profiles | × | ||
| Risk Verdict | × | ||
| Escalations and human review | × | ||
| Breakglass protocol | × | × | |
| Runtime containment and kill switch | × | × | |
| Cross-organisation federation | × | × | |
| Products | |||
| Authorisation Layer | |||
| Authorised Agents | |||
| Provenance Vault | 90 days | 12 months | Unlimited |
| Xybern Redact | Add-on | ||
| MCP gateway | |||
| Custom agent builds | × | × | |
| Deployment and support | |||
| Xybern Cloud | |||
| Self-hosted relay | × | ||
| On-premise or air-gapped | × | × | |
| Data residency (US, EU, UK) | × | × | |
| SSO / SCIM | × | SSO | SSO + SCIM |
| Support | Priority | Named engineer | |
| SLA | × | 99.5% | 99.9% |
| Book a demo | Book a demo | Talk to us | |
Tell us how many agents you run and what they are allowed to touch, and we will size it with you.