Free
For individual developers, students, and hobbyists.
$0
forever
- Organizations
- 1
- Team members
- 1
- Projects
- 3
- Infrastructure resources
- 25
- Runbooks
- 10
Pricing
Priced per team, not per secret.
Store as many credentials as you need on every plan. What you pay for is collaboration, governance, and history - never the number of secrets you keep.
- No credit card to start
- Cancel any time
- Unlimited secrets on every plan
Pro
For freelancers, consultants, and power users.
$12
per month
- Organizations
- Unlimited
- Team members
- 1
- Projects
- Unlimited
- Infrastructure resources
- Unlimited
- Runbooks
- Unlimited
Team
Most teamsFor teams that share infrastructure and secrets.
$49
per month · 5 users included
- Organizations
- Unlimited
- Team members
- 5
- Projects
- Unlimited
- Infrastructure resources
- Unlimited
- Runbooks
- Unlimited
Enterprise
For organizations with compliance and identity needs.
Custom
contact sales
- Organizations
- Unlimited
- Team members
- Unlimited
- Projects
- Unlimited
- Infrastructure resources
- Unlimited
- Runbooks
- Unlimited
Compare
Everything, plan by plan.
Security fundamentals are on every plan, including the free one. Paid tiers add collaboration, governance, and history.
| Feature | Free | Pro | Team | Enterprise |
|---|---|---|---|---|
| Security | ||||
| End-to-end encryption | Included | Included | Included | Included |
| MFA | Included | Included | Included | Included |
| Device management | Included | Included | Included | Included |
| Access requests & approval workflows | Not included | Not included | Included | Included |
| Just-in-time accessSoon | Not included | Not included | Not included | Included |
| IP restrictionsSoon | Not included | Not included | Not included | Included |
| Session recordingSoon | Not included | Not included | Not included | Included |
| Dynamic credentialsSoon | Not included | Not included | Not included | Included |
| Runbooks | ||||
| CLI runbook execution | Included | Included | Included | Included |
| Productivity | ||||
| Search | Included | Included | Included | Included |
| Advanced search & filters | Not included | Included | Included | Included |
| Resource favorites | Not included | Included | Included | Included |
| Custom tags | Not included | Included | Included | Included |
| Bulk actions, import & export | Not included | Included | Included | Included |
| Offline metadata cache | Not included | Included | Included | Included |
| History | ||||
| Credential & runbook version history | Not included | Included | Included | Included |
| Restore previous versions | Not included | Included | Included | Included |
| Backup | ||||
| Automatic backups | Not included | Included | Included | Included |
| Team | ||||
| Team members & invites | Not included | Not included | Included | Included |
| Shared resources, profiles & secrets | Not included | Not included | Included | Included |
| Role-based access control | Not included | Not included | Included | Included |
| Access & expiry notifications | Not included | Not included | Included | Included |
| Audit | ||||
| Audit logs & access history | Not included | Not included | Included | Included |
| Policies | ||||
| Organization & security policies | Not included | Not included | Included | Included |
| Identity | ||||
| SAML SSOSoon | Not included | Not included | Not included | Included |
| OIDCSoon | Not included | Not included | Not included | Included |
| SCIM provisioningSoon | Not included | Not included | Not included | Included |
| LDAPSoon | Not included | Not included | Not included | Included |
| Infrastructure | ||||
| Self-hosting & air-gapped deploysSoon | Not included | Not included | Not included | Included |
| Compliance | ||||
| Compliance reports & audit exportSoon | Not included | Not included | Not included | Included |
Billing questions
Before you reach for the card.
Anything else, ask us - a person replies, and we will tell you if a cheaper plan does what you need.
Is the free plan a trial?
No. The Free plan is free forever for a single developer, with three projects and twenty-five infrastructure resources. It includes end-to-end encryption, MFA, device management, and CLI runbook execution - the security fundamentals are not paywalled.
What counts as an infrastructure resource?
Anything you register as a target: an SSH host, a database, a cloud profile, or a Kubernetes cluster. Secrets are unlimited on every plan and never count toward the limit.
What happens if I go over a limit?
Nothing breaks and nothing is deleted. Existing resources keep working; you simply cannot create new ones of that type until you upgrade or free up room.
What happens if I downgrade?
Your data stays intact and readable. If you are over the lower plan’s limits, creation of new resources of that type is blocked until you are back within them.
Who handles payment?
Paddle acts as the merchant of record. They handle the payment, your invoice, and any applicable sales tax or VAT. We never see or store your card details.
Do you offer discounts?
Yes - for registered non-profits, accredited educational institutions, and open-source maintainers. Tell us about your project and we will sort it out.
Need seats, invoicing, SSO, or a signed DPA? Talk to us about Enterprise.