Pricing
Start free. Prove as you grow.
From your first AI-BOM scan to regulated enterprise assurance.
Free
Discover
Free
For developers and security engineers discovering AI usage.
- Public repo scan
- Watermarked AI-BOM export
- Saved scan history (last 3)
- CLI scanner (open core)
Most popular
Team
Manage
$300/mo
Save 20%
10 AI systems5 users
- Private repo scanning
- AI system register + living AI-BOM
- Evidence vault (tamper-evident, hashed)
- Readiness reporting — your regional pack (RBI, CBUAE, or CERT-In)
- CycloneDX & SPDX exports
- 90-day retention
No card required
Business
Monitor & Comply
Contact sales
For organisations running AI in production.
- Everything in Team
- 100 AI systems, 25 users
- Continuous monitoring — SDK + gateway telemetry (metadata-only default)
- Multiple framework packs & pack management
- Shadow AI discovery
- Connectors (Entra ID, GitHub, AWS Bedrock)
- Workflows & notifications
- Region-selectable hosting & data residency
- Single-tenant / customer cloud / on-premise options
- 1-year retention
- Priority support
Enterprise
Regulated Assurance
Custom
For regulated organisations that own their hosting and audit terms.
- Everything in Business
- SSO / SAML
- Region-selectable hosting & data residency
- Single-tenant / customer cloud / on-premise options
- Custom retention & audit windows
- Custom framework packs
- Board reporting
- Security review support
- SLA
Compare
Every capability, plan by plan.
| Compare plans | Free | Team | Business | Enterprise |
|---|---|---|---|---|
| Discover | ||||
| Public repo scan | ✓ | ✓ | ✓ | ✓ |
| CLI scanneropen core | ✓ | ✓ | ✓ | ✓ |
| Private repo scanning | – | ✓ | ✓ | ✓ |
| Scheduled rescans | – | ✓ | ✓ | ✓ |
| Shadow AI discoverytelemetry clustering | – | – | ✓ | ✓ |
| Record | ||||
| AI systems | Scan-only | 10 | 100 | Custom |
| Users | 1 | 5 | 25 | Custom |
| Living AI-BOM19 component types incl. MCP servers | – | ✓ | ✓ | ✓ |
| Evidence vaulthashed, tamper-evident | – | ✓ | ✓ | ✓ |
| Decision historycausal ledger | – | ✓ | ✓ | ✓ |
| Relationship graph | – | ✓ | ✓ | ✓ |
| Monitor | ||||
| SDK telemetrymetadata-only default | – | – | ✓ | ✓ |
| Gateway telemetry & policy events | – | – | ✓ | ✓ |
| Included events / month | – | – | 1M | 10M |
| Comply | ||||
| Readiness reportingdefault regional pack | – | ✓ | ✓ | ✓ |
| Framework pack managementmulti-pack, add-ons | – | – | ✓ | ✓ |
| Available packs | RBI · CBUAE · SDAIA · CERT-In · EU AI Act · ISO/IEC 42001 · NIST AI RMF | |||
| Board-ready reports | – | – | ✓ | ✓ |
| Exports | Watermarked PDF | PDF + CycloneDX + SPDX | + JSON API | + custom |
| Deploy & support | ||||
| Retention | 72h (scans) | 90 days | 1 year | Custom |
| SSO / SAML | – | – | – | ✓ |
| Hosting | Shared | Shared | Region-selectable · single-tenant · customer cloud · on-prem | Region-selectable · single-tenant · customer cloud · on-prem |
| Support | Docs | Priority | SLA | |
Supports compliance readiness and evidence. ThreatLens does not certify legal compliance.
Free
Discover
Public repo scan✓
CLI scanneropen core✓
Private repo scanning–
Scheduled rescans–
Shadow AI discoverytelemetry clustering–
Record
AI systemsScan-only
Users1
Living AI-BOM19 component types incl. MCP servers–
Evidence vaulthashed, tamper-evident–
Decision historycausal ledger–
Relationship graph–
Monitor
SDK telemetrymetadata-only default–
Gateway telemetry & policy events–
Included events / month–
Comply
Readiness reportingdefault regional pack–
Framework pack managementmulti-pack, add-ons–
Available packsRBI · CBUAE · SDAIA · CERT-In · EU AI Act · ISO/IEC 42001 · NIST AI RMF
Board-ready reports–
ExportsWatermarked PDF
Deploy & support
Retention72h (scans)
SSO / SAML–
HostingShared
SupportDocs
TeamMost popular
Discover
Public repo scan✓
CLI scanneropen core✓
Private repo scanning✓
Scheduled rescans✓
Shadow AI discoverytelemetry clustering–
Record
AI systems10
Users5
Living AI-BOM19 component types incl. MCP servers✓
Evidence vaulthashed, tamper-evident✓
Decision historycausal ledger✓
Relationship graph✓
Monitor
SDK telemetrymetadata-only default–
Gateway telemetry & policy events–
Included events / month–
Comply
Readiness reportingdefault regional pack✓
Framework pack managementmulti-pack, add-ons–
Available packsRBI · CBUAE · SDAIA · CERT-In · EU AI Act · ISO/IEC 42001 · NIST AI RMF
Board-ready reports–
ExportsPDF + CycloneDX + SPDX
Deploy & support
Retention90 days
SSO / SAML–
HostingShared
SupportEmail
Business
Discover
Public repo scan✓
CLI scanneropen core✓
Private repo scanning✓
Scheduled rescans✓
Shadow AI discoverytelemetry clustering✓
Record
AI systems100
Users25
Living AI-BOM19 component types incl. MCP servers✓
Evidence vaulthashed, tamper-evident✓
Decision historycausal ledger✓
Relationship graph✓
Monitor
SDK telemetrymetadata-only default✓
Gateway telemetry & policy events✓
Included events / month1M
Comply
Readiness reportingdefault regional pack✓
Framework pack managementmulti-pack, add-ons✓
Available packsRBI · CBUAE · SDAIA · CERT-In · EU AI Act · ISO/IEC 42001 · NIST AI RMF
Board-ready reports✓
Exports+ JSON API
Deploy & support
Retention1 year
SSO / SAML–
HostingRegion-selectable · single-tenant · customer cloud · on-prem
SupportPriority
Enterprise
Discover
Public repo scan✓
CLI scanneropen core✓
Private repo scanning✓
Scheduled rescans✓
Shadow AI discoverytelemetry clustering✓
Record
AI systemsCustom
UsersCustom
Living AI-BOM19 component types incl. MCP servers✓
Evidence vaulthashed, tamper-evident✓
Decision historycausal ledger✓
Relationship graph✓
Monitor
SDK telemetrymetadata-only default✓
Gateway telemetry & policy events✓
Included events / month10M
Comply
Readiness reportingdefault regional pack✓
Framework pack managementmulti-pack, add-ons✓
Available packsRBI · CBUAE · SDAIA · CERT-In · EU AI Act · ISO/IEC 42001 · NIST AI RMF
Board-ready reports✓
Exports+ custom
Deploy & support
RetentionCustom
SSO / SAML✓
HostingRegion-selectable · single-tenant · customer cloud · on-prem
SupportSLA
FAQ
Pricing questions, answered.
Which framework pack does Team include?
One regional readiness pack, selected at onboarding by your region — RBI (India), CBUAE (UAE), or CERT-In. Additional packs and multi-framework management are available on Business.
Is a card required for the trial?
No. The Team trial runs for 30 days with full Team features, and no card is required to start.
What does “metadata-only telemetry” mean?
We record what happened — models, destinations, classifications, decisions — not your prompts. Raw content never leaves your environment by default.
Can we deploy in our own cloud or on-premise?
Yes — Business and Enterprise include single-tenant, customer-cloud, and on-premises options with region-selectable hosting.
How does regional pricing work?
Prices are billed in your entity’s local currency; regional pricing applies to organisations registered in that region.
What happens to my free scans if I upgrade?
They copy into your Team workspace as imported records, pending review — nothing is lost, nothing becomes evidence silently.
Not sure where to start?
Start with a free AI-BOM scan, or talk to us about the right plan for your regulatory and deployment needs.