Flat per tier. Never per-GB.
You should never have to drop a log source to control cost. Every self-serve tiers use transparent monthly or annual pricing — ingest everything, monitor the platform. Community is free for evaluation, local familiarisation and workflow review.
Community
For evaluation, home labs and individual operators who want to test the full AegisCore platform before commercial pricing is finalized.
- Seats
- 1
- Hosts
- 5
- Devices
- 1
- Operations
- Full SecOps platform
- Full installer — engine, 140 tools, 3,132 Sigma rules, local AI
- Onboarding, dashboard and inventory visibility
- Basic attack-graph preview and reporting
- Community support
Professional
For individual security professionals running authorized security operations with AegisCore in real environments.
- Seats
- 2
- Hosts
- 25
- Devices
- 2
- Operations
- Full SecOps platform
- Everything in Community, unrestricted
- Full Red Team and Blue Team operations
- Attack-graph analysis and evidence packs
- Playbook automation and decision records
- Email support — 48-hour response
Team
For small SOC teams that need collaboration, SSO and shared decision intelligence on an annual plan.
- Seats
- 10
- Hosts
- 100
- Devices
- 5
- Operations
- Full SecOps platform
- Everything in Professional
- Multi-user collaboration — up to 10 seats
- SSO via OIDC and SAML
- Decision learning panel and full decision graph
- Priority support — 24-hour response
Enterprise
For regulated organisations and MSSPs that need multi-tenancy, auditor access, offline activation and deployment planning.
- Seats
- Unlimited
- Hosts
- Unlimited
- Devices
- Unlimited
- Operations
- Tailored SecOps platform
- Everything in Team
- Multi-tenant deployment and workspaces
- Read-only auditor portal and Brain explainability
- Full compliance evidence — SOC 2, NIS2, HIPAA, ISO 27001
- Air-gapped offline activation
- 24/7 support with a dedicated contact
All tiers use the same installer. Activation in the first-run wizard decides what unlocks — upgrading never requires a re-download.
Every capability, every tier
| Community | Professional | Team | Enterprise | |
|---|---|---|---|---|
| Limits | ||||
| Seats | 1 | 2 | 10 | Unlimited |
| Monitored hosts | 5 | 25 | 100 | Unlimited |
| Devices | 1 | 2 | 5 | Unlimited |
| Operations | ||||
| Red Team Engine | Trial | |||
| Blue Team Engine | Trial | |||
| Playbook automation | ||||
| Attack-graph analysis | Preview | |||
| Collaboration | ||||
| Multi-user | ||||
| SSO (OIDC / SAML) | ||||
| Multi-tenant | ||||
| Compliance & audit | ||||
| Compliance evidence | Basic | Full | Full | |
| Auditor portal | ||||
| Brain explainability | Basic | Full | ||
| Air-gapped activation | Optional | |||
| Support | ||||
| Support channel | Community | Email 48h | Priority 24h | Dedicated contact |
Pricing, answered plainly
What is Community for?
Because evaluation should be honest. Community lets you review the interface, local deployment model, evidence workflow, reporting, configuration and platform architecture before buying. Operational execution is limited by tier, scale and safety controls.
What happens after the 14-day trial?
Community continues to work for evaluation and familiarisation — it does not shut off. Activate a paid key whenever you are ready for operational use.
Do you meter log ingestion?
No. There is no per-GB pricing in the self-serve model. Professional and Team use fixed pricing; Enterprise is scoped individually.
Can Enterprise run fully air-gapped?
Yes. Enterprise (and optionally Professional) supports offline activation via a cryptographically signed Ed25519 license envelope — no phone-home required at any point.
Is there an MSSP / partner model?
A hybrid MSSP partner programme is on the roadmap, with white-label deployment and multi-tenant management. Contact sales to register early interest.
How do upgrades work?
Upgrading is an in-app license activation — never a re-download. The installer you already have covers every tier; the key decides what unlocks.
Start with the free edition today
Community lets you explore AegisCore locally — no signup, no card. Upgrade in-app when you are ready for operational use.