Per runner, not per seat.
At this price, one prevented 2 a.m. incident pays for the year. See example workflows.
Free
For evaluation and solo use.
$0 / forever
Start free- 3 runners
- 1 user
- 7-day audit retention
- All policy features
Team
For production teams.
$20 / runner / mo
Continue with Team- Up to 100 runners
- Unlimited users
- Single sign-on (OIDC)
- 90-day audit retention
- Audit export (CSV + SIEM)
- Email support
- 99.95% uptime target
- Automated invoices
Enterprise
For design partners and regulated teams.
Custom
Talk to sales- Unlimited runners and users
- Everything in Team
- SCIM directory sync
- 365-day audit retention
- Security and procurement review
- Slack and email support
- Design-partner deployment planning
- Rollout support
- 99.99% uptime SLA
- Custom commercial terms
Get started
Your first useful result, in three steps.
Create an account
Create a free account. No credit card required.
Install a runner
Run the install command from your console on a host. The runner connects and makes its installed actions available.
Run an action
Run a check from the console, then connect Claude, ChatGPT, or Cursor to use the same actions. Open Runs to see the result.
Compare plans
| Feature | Free | Team | Enterprise |
|---|---|---|---|
| Runners | 3 | 100 | Unlimited |
| Users | 1 | Unlimited | Unlimited |
| Audit retention | 7 days | 90 days | 365 days |
| Policy + approvals | |||
| MCP server | |||
| Pack trust + drift blocking | |||
| SIEM export | — | ||
| Single sign-on (OIDC) | — | ||
| SCIM directory sync | — | — | |
| Uptime | — | 99.95% target | 99.99% SLA |
| Deployment planning | — | — | Design-partner deployment planning |
| Support | — | Email support | Slack and email support |
Frequently asked questions
What counts as a "runner"?
One installation of the emisar binary on one host (VM, container, or bare metal). Run as many runners as your plan allows. Human users are unlimited on Team and Enterprise.
Do you store the output of my commands?
Yes. Run history stores command output after the runner filters it on the host using 20 built-in redaction patterns and your per-action rules. The audit trail records who ran the action, when, on which runner, their reason, and the final exit code.
How does billing work?
Paid plans are billed per runner through Paddle, our Merchant of Record. You get an invoice for each billing period, and Paddle handles sales tax and VAT. We never see or store full card numbers.
Can I self-host?
The supported product uses emisar's hosted control plane. The runner, MCP bridge, and packs are open source under Apache-2.0. You can run the control-plane code under the Business Source License for evaluation, but supported self-hosted and air-gapped deployments are not generally available. Contact us if you need self-hosting.
Can I cancel any time?
Yes. Cancel in billing settings to stop renewal through Paddle. Your paid features and limits remain available until the end of the billing period, then your account returns to Free limits.
Do you support SSO and SCIM?
Yes. OIDC single sign-on (Okta, Entra ID, JumpCloud, Google Workspace, Keycloak, or any compliant provider) is on Team and Enterprise. Automatic offboarding needs SCIM 2.0 directory sync, which is on Enterprise. Deactivate someone in your IdP and emisar ends their browser access to that workspace and revokes keys issued from that membership without anyone touching the console. With OIDC alone they can't sign in again, but a live session or an existing API key keeps working until you suspend them here.
Do you offer startup discounts?
Yes. Email sales@emisar.dev with your YC or pre-seed letter and we'll take it from there.
More on how we handle data, secrets, and audit on the security page, and how billing and cancellations work in our refund policy.