Annual recurring plans (flat per organization, not per seat) or one-shot access assessments. Start free, scale when you need to, and credit one-shots toward your plan.
Explore the platform with demo data and validate workflows with no commitment.
For startups that need session brokering, vault and auditable evidence.
For companies with multi-cloud, databases and continuous compliance obligations.
Multi-tenant, frequent audits and partial white-label.
For regulated orgs needing SLA, SAML SSO, on-prem brokers and white-label evidence.
Prices in EUR excl. VAT · Payments via Stripe · Cancel anytime from the portal.
Everything you need to know, aligned with the real GuardVault PAM+ modules.
| Feature | Free | Starter | Pro | Business | Enterprise |
|---|---|---|---|---|---|
| Session brokering & recording | |||||
| PSM proxy (SSH / RDP) | Demo | ||||
| Full session recording (video + keystrokes) | |||||
| OCR search across recordings | |||||
| Live session shadowing & kill | |||||
| AI Session Copilot (auto-summaries) | |||||
| Vault & credentials | |||||
| Encrypted credential vault (AES-256-GCM) | |||||
| Just-in-time checkout with TTL | |||||
| Automatic rotation (SSH / DB / cloud) | Basic | ||||
| HSM-backed keys + BYOK | |||||
| Shamir-split root keys · air-gap seal | |||||
| Authorization & policy | |||||
| Command-level RBAC | |||||
| Peer approval workflows | |||||
| MFA step-up (WebAuthn / TOTP) | |||||
| Time & geo policies | |||||
| Break-glass with dual-open | |||||
| Database, network & analytics | |||||
| TACACS+ / RADIUS AAA | |||||
| DAM · SQL proxy + dynamic masking | |||||
| PTA · behavioral analytics | |||||
| Detection-as-Code (Sigma) | |||||
| Native clients (agent-less RDP/SSH) | |||||
| Auditing & compliance | |||||
| Immutable, hash-chained audit log | |||||
| Audit retention | 7 days | 90 days | 1 year | 3 years | Custom |
| SIEM export (Splunk/Sentinel/Datadog) | |||||
| Signed forensic PDF evidence | |||||
| SOC 2 · ISO 27001 · PCI · HIPAA packs | |||||
| Identity & multi-tenant | |||||
| SSO Google / Microsoft | |||||
| SAML SSO + SCIM + group mapping | Add-on | ||||
| Multi-tenant sub-organizations | Up to 5 | Unlimited | |||
| White-label (no GuardVault brand) | Partial | ||||
| Quotas & support | |||||
| Users | 2 | 5 | 20 | 50 | Unlimited |
| Monitored assets | 5 | 50 | 500 | 2,000 | Unlimited |
| Brokered sessions / month | 3 | 500 | 5,000 | 25,000 | Unlimited |
| On-prem brokers (Docker/K8s/VM) | |||||
| SLA | — | 99.5% | 99.9% | 99.9% | 99.95% |
| Support | Community | Email + Slack | Priority Slack | 24/7 Slack Connect | |