pricing --plans --inr
Simple, honest pricing
Access is invite-only while we open up. Request access, then pick the plan that fits when your team needs shared vaults, JIT access, and compliance reporting.
Personal
Free
For getting started and personal use.
Included with every account once your access is approved.
- Personal credential vault
- Terminal & SSH access
- 3 saved file-transfer connections over SFTP & FTPS
- Browser extension
- Community support
One person, one account. Your vault is Connected by default. In Settings you can set up the vault key that Private vault uses.
Not included
- Credential rotation and exposure detection
- Shared team vaults
- Session recording
- Compliance reporting
Personal
Pro
For power users who live in the terminal.
- Everything in Free
- Unlimited vaults & SSH connections
- Credential rotation & exposure detection
- Longer guaranteed audit retention
- Priority support
One person, one account. Your vault is Connected by default. In Settings you can set up the vault key that Private vault uses.
Not included
- Shared team vaults
- Session recording
- Compliance reporting
Business
Team
For teams that share access and need an audit trail.
- Everything in Pro
- Shared team vaults & roles
- Just-in-time access elevation
- Session recording
- Fleet commands across your hosts
- Slack, PagerDuty, webhook & SIEM (Splunk, Sentinel) alerts
- Flat price, up to 10 seats
For organizations that share access and need an audit trail.
Not included
- SSO / SAML & SCIM provisioning
- Compliance reporting
Business
Enterprise
For organizations with SSO, residency and compliance needs.
- Everything in Team
- SSO / SAML & SCIM provisioning
- Data residency & private AI
- HashiCorp Vault secret sync
- Customer-managed, HSM-backed master key on self-hosted
- SOC 2 reporting & DPA
- Dedicated support & onboarding
For organizations that share access and need an audit trail.
Prices exclusive of applicable taxes (GST in India). Team is a flat price for up to 10 seats.
Compare plans
Everything in Free carries up through Pro, Team and Enterprise — here's what each tier adds.
Free
Vault & credentials
- Credential vault (logins, keys, env, notes)
- Included
- Importers (password managers, Credential Exchange, SSH/SFTP clients)
- Included
- Unlimited vaults & SSH connections
- —
- Credential rotation & exposure detection
- —
Terminal & access
- Terminal & SSH access
- Included
- Browser extension
- Included
- Just-in-time access elevation
- —
- Session recording
- —
- Fleet commands (fan-out across hosts)
- —
Teams
- Shared team vaults & roles
- —
- Multiplayer presence & locks
- —
- Managed access to client organizations
- —
- Flat price, up to 10 seats
- —
Security & compliance
- Tamper-evident audit trail
- Included
- Longer guaranteed audit retention
- —
- Alerting & SIEM integrations (Slack, PagerDuty, webhooks, Splunk, Sentinel)
- —
- Compliance reports
- —
- SSO / SAML & SCIM provisioning
- —
- Data residency & private AI
- —
- HashiCorp Vault secret sync
- —
- Customer-managed, HSM-backed master key
- —
- SOC 2 reporting & DPA
- —
Support
- Support
- Community
Pro
Vault & credentials
- Credential vault (logins, keys, env, notes)
- Included
- Importers (password managers, Credential Exchange, SSH/SFTP clients)
- Included
- Unlimited vaults & SSH connections
- Included
- Credential rotation & exposure detection
- Included
Terminal & access
- Terminal & SSH access
- Included
- Browser extension
- Included
- Just-in-time access elevation
- —
- Session recording
- —
- Fleet commands (fan-out across hosts)
- —
Teams
- Shared team vaults & roles
- —
- Multiplayer presence & locks
- —
- Managed access to client organizations
- —
- Flat price, up to 10 seats
- —
Security & compliance
- Tamper-evident audit trail
- Included
- Longer guaranteed audit retention
- Included
- Alerting & SIEM integrations (Slack, PagerDuty, webhooks, Splunk, Sentinel)
- —
- Compliance reports
- —
- SSO / SAML & SCIM provisioning
- —
- Data residency & private AI
- —
- HashiCorp Vault secret sync
- —
- Customer-managed, HSM-backed master key
- —
- SOC 2 reporting & DPA
- —
Support
- Support
- Priority
Team
Vault & credentials
- Credential vault (logins, keys, env, notes)
- Included
- Importers (password managers, Credential Exchange, SSH/SFTP clients)
- Included
- Unlimited vaults & SSH connections
- Included
- Credential rotation & exposure detection
- Included
Terminal & access
- Terminal & SSH access
- Included
- Browser extension
- Included
- Just-in-time access elevation
- Included
- Session recording
- Included
- Fleet commands (fan-out across hosts)
- Included
Teams
- Shared team vaults & roles
- Included
- Multiplayer presence & locks
- Included
- Managed access to client organizations
- Included
- Flat price, up to 10 seats
- Included
Security & compliance
- Tamper-evident audit trail
- Included
- Longer guaranteed audit retention
- Included
- Alerting & SIEM integrations (Slack, PagerDuty, webhooks, Splunk, Sentinel)
- Included
- Compliance reports
- —
- SSO / SAML & SCIM provisioning
- —
- Data residency & private AI
- —
- HashiCorp Vault secret sync
- —
- Customer-managed, HSM-backed master key
- —
- SOC 2 reporting & DPA
- —
Support
- Support
- Priority
Enterprise
Vault & credentials
- Credential vault (logins, keys, env, notes)
- Included
- Importers (password managers, Credential Exchange, SSH/SFTP clients)
- Included
- Unlimited vaults & SSH connections
- Included
- Credential rotation & exposure detection
- Included
Terminal & access
- Terminal & SSH access
- Included
- Browser extension
- Included
- Just-in-time access elevation
- Included
- Session recording
- Included
- Fleet commands (fan-out across hosts)
- Included
Teams
- Shared team vaults & roles
- Included
- Multiplayer presence & locks
- Included
- Managed access to client organizations
- Included
- Flat price, up to 10 seats
- Included
Security & compliance
- Tamper-evident audit trail
- Included
- Longer guaranteed audit retention
- Included
- Alerting & SIEM integrations (Slack, PagerDuty, webhooks, Splunk, Sentinel)
- Included
- Compliance reports
- Included
- SSO / SAML & SCIM provisioning
- Included
- Data residency & private AI
- Included
- HashiCorp Vault secret sync
- Included
- Customer-managed, HSM-backed master key
- Self-hosted
- SOC 2 reporting & DPA
- Included
Support
- Support
- Dedicated
pricing --faq
Pricing questions
How do I get an account?
Access is invite-only while we open up, so every plan starts with an access request. The Free plan covers a personal vault, terminal and SSH access, and the browser extension; Pro adds unlimited vaults and connections, rotation and exposure detection.
How does team billing work?
Team is billed as one flat monthly subscription per organization, with up to 10 seats included. Once your access is set up you can add members up to that limit.
What currencies can I pay in?
Prices are shown and charged in INR, with GST applied for India. Payments are processed by Razorpay. Talk to us for invoicing or other arrangements on Enterprise.
Can I change or cancel my plan?
Yes — you can upgrade, downgrade or cancel at any time. Changes take effect from the next billing cycle, and there's no lock-in.
What are Connected vault and Private vault?
Your vault is Connected by default: Kutrion opens credentials on the server for authorized use and records who used them. On Free and Pro you can switch a single-member account to Private vault, where items open and are edited only on your devices and the server stores only a wrapped key. Private vault turns off brokered terminal and file transfer sessions, rotation, health checks, sharing and AI over credentials, stores no new recordings or command history, and switching permanently deletes existing terminal and RDP recordings, AI summaries, command history, exposure findings and share links. Item names, URLs and usernames stay readable by the server, so Private vault protects against a server whose stored data is exposed, not against a server that is actively malicious. A self-hosted deployment needs a license that includes Private vault.
What counts as Enterprise?
Enterprise adds SSO/SAML and SCIM, data residency and private AI, SOC 2 reporting and a DPA, plus dedicated onboarding and support. Pricing is tailored — talk to sales for a quote.