Pricing

Priced on the work the layer does, one authorisation decision at a time, not on the number of products. Every plan includes the full pipeline.

Starter

For teams putting their first agents into production, with every action on record.

What you get
Up to 5 registered agents, 3 seatsFull pipeline: intercept, identify, authorise, decide, recordDeterministic and semantic policiesAuthorisation receipts on every decisionShadow mode and backtestingPython and TypeScript SDKs, MCP gatewayXybern Cloud, 90-day vault retention
Book a demo
Growth

For teams running agents across systems, with humans in the loop on the decisions that matter.

Everything in Starter, plus
Up to 50 registered agents, 15 seatsMandates & Charter, Intent Contracts, Access ProfilesRisk Verdict and escalations with human reviewTemporal windows and signed webhooksXybern Redact across every layerSelf-hosted relay for local enforcementSSO, 12-month vault retention, priority support
Book a demo
Enterprise

For regulated environments with residency, isolation, air-gap, or cross-organisation needs.

Everything in Growth, plus
Unlimited agents and seatsOn-premise, private cloud, or air-gappedData residency in US, EU, or UKCross-organisation federationRuntime containment and kill switchCustom mandate authoring and agent buildsSCIM, unlimited retention, 99.9% SLA, named engineer
Talk to us
FeaturesStarterGrowthEnterprise
Volume
Authorisation decisions included 50k / mo 500k / mo Committed
Registered agents 5 50 Unlimited
Seats 3 15 Unlimited
Workspaces 1 Unlimited Unlimited
Enforcement
Deterministic and semantic policies
Scoped, time-bound delegation
Shadow mode and backtesting
Mandates & Charter×
Intent Contracts×
Access Profiles×
Risk Verdict×
Escalations and human review×
Breakglass protocol××
Runtime containment and kill switch××
Cross-organisation federation××
Products
Authorisation Layer
Authorised Agents
Provenance Vault 90 days 12 months Unlimited
Xybern RedactAdd-on
MCP gateway
Custom agent builds××
Deployment and support
Xybern Cloud
Self-hosted relay×
On-premise or air-gapped××
Data residency (US, EU, UK)××
SSO / SCIM× SSO SSO + SCIM
Support Email Priority Named engineer
SLA× 99.5% 99.9%
Book a demoBook a demoTalk to us

Not sure which plan fits?

Tell us how many agents you run and what they are allowed to touch, and we will size it with you.