Licensed, not subscribed.
Annual licenses. Every tier runs the full pipeline across every surface, with no per-scan or metered fees.
Start-up
A single team getting started.
- One team
- All three surfaces
- Full pipeline
Team
Several teams on a shared platform.
- Multiple teams
- Shared console
- Role-based access
Enterprise
Org-wide, with support and SSO.
- Org-wide rollout
- SSO and SCIM
- Priority support
Sovereign
Runs entirely inside your own infrastructure.
- In your perimeter
- In-country by default
- Your keys, your data
The full platform, on every plan.
Tiers change how many teams and how you deploy, never what the platform can do.
| Feature | Start-up | Team | Enterprise | Sovereign |
|---|---|---|---|---|
| Full pipeline | ||||
| All three surfaces | ||||
| Proven findings only | ||||
| Teams | One | Several | Org-wide | Org-wide |
| Role-based access | ||||
| SSO and SCIM | ||||
| Priority support | ||||
| In-country deploy | Optional | |||
| Your keys, air-gapped |
Questions teams ask first.
Do you store our code?
No. Shield deploys inside your perimeter; your code and model calls stay in-country by default, and every outbound decision is logged.
How is it priced?
An annual license by tier. Every tier runs the full pipeline across every surface, with no per-scan or metered fees.
What counts as a finding?
Only a reproduced one. Nothing reaches a report until it is proven against the running target, with the evidence captured.
Can it run fully air-gapped?
Yes. The Sovereign tier runs entirely inside your own infrastructure, with keys you own and rotate.
Which surfaces are covered?
Mobile apps, web apps and APIs, and the code in your editor. All through one pipeline and one evidence model.
How do we start?
Request a pilot on a single surface. We stand Shield up inside your environment and show you the first proven findings.
Tell us where Shield needs to run.
We will scope a license to your teams and the perimeter it has to stay inside.