pricing
Start free. Scale when it pays for itself.
Every plan is agentless and read-only — one subscription per AWS connection. No credit card to run your first scan. Tiers gate scan frequency, check coverage, and integrations.
Starter
Try it on one account. Manual scans only.
$0forever
44 checks · 1 connection
- 1 AWS connection
- 44 checks · 6 pillars
- Up to 50 resources / connection
- 2 scans / month · on-demand
- PDF export
- Email alerts
- Cost headline only — upgrade to Pro for the full breakdown, quick wins, and AI-spend insights
- Community support
recommended
Pro
For the team that owns the AWS account.
$79mo / connection
109 checks · up to 500 resources
- 109 checks · 6 pillars
- Up to 500 resources / connection
- 10 scans / month · weekly schedule
- 5 team members
- Control mappings: CIS, SOC 2, ISO 27001, GDPR
- PDF + CSV + JSON export
- Slack + PagerDuty + Webhook integrations
- Cost Intelligence — see where your AWS spend (including AI/Bedrock) is going, catch spend spikes and possible LLMjacking, each with the fix
- Risk-accept workflow
- Email support
Max
Production-grade. Daily scans, AI-enriched remediation.
$199mo / connection
193 checks · up to 2,000 resources
- 193 checks · 6 pillars · full depth
- Up to 2,000 resources / connection
- 50 scans / month · daily schedule
- 10 team members
- Control mappings to all 8 frameworks (CIS, SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST 800-53, GDPR, AWS Well-Architected)
- REST API access
- AI-enriched remediation (on-demand)
- Terraform + CloudFormation IaC templates
- Cost Intelligence — see where your AWS spend (including AI/Bedrock) is going, catch spend spikes and possible LLMjacking, each with the fix
- AI spend-spike & LLMjacking alerts on every scan
- Email support
Organization
Multi-account rollups + SSO.
Custom
193 checks · pooled accounts
- Everything in Max — AI-enriched remediation enabled on contract
- Custom pooled capacity — admin-set per contract
- 25 team members
- Cross-account dashboards + OU grouping
- SSO (SAML)
- Audit log export
- Signable DPA
- Volume discount at 4+ AWS accounts
Prices in USD, billed via Paddle. Cancel anytime · 30-day refund.
compare
Every difference, laid out.
| feature | Starter | Pro | Max | Organization |
|---|---|---|---|---|
| § 01 · Scanning | ||||
| Check count | 44 | 109 | 193 | 193 |
| Resources / connection | 50 | 500 | 2,000 | pooled · admin-set |
| AWS accounts | 1 | 1 / sub | 1 / sub | pooled · admin-set |
| Scan cadence | on-demand | weekly | daily | daily (configurable) |
| Cross-region | ✓Included | ✓Included | ✓Included | ✓Included |
| § 02 · Export & API | ||||
| PDF report | ✓Included | ✓Included | ✓Included | ✓Included |
| CSV / JSON export | —Not included | ✓Included | ✓Included | ✓Included |
| REST API access | —Not included | —Not included | ✓Included | ✓Included |
| Webhook delivery | —Not included | ✓Included | ✓Included | ✓Included |
| § 03 · Alerts & workflow | ||||
| Email alerts | ✓Included | ✓Included | ✓Included | ✓Included |
| Alert routing rules | —Not included | ✓Included | ✓Included | ✓Included |
| Slack integration | —Not included | ✓Included | ✓Included | ✓Included |
| PagerDuty | —Not included | ✓Included | ✓Included | ✓Included |
| Risk-accept workflow | —Not included | ✓Included | ✓Included | ✓Included |
| Remediation runbooks | —Not included | ✓Included | ✓Included | ✓Included |
| AI-enriched remediation | —Not included | —Not included | ✓Included | on contract |
| § 04 · Org & access | ||||
| Team members | 1 | 5 | 10 | 25 |
| SSO (SAML) | —Not included | —Not included | —Not included | on contract |
| Org-wide rollups | —Not included | —Not included | —Not included | ✓Included |
| Audit log export | —Not included | —Not included | —Not included | ✓Included |
| Signable DPA | —Not included | —Not included | ✓Included | ✓Included |
| § 05 · Support | ||||
| Channel | community | email + dedicated | ||
| Onboarding walkthrough | —Not included | —Not included | —Not included | ✓Included |
| § 06 · Cost Intelligence | ||||
| Cost Intelligence (AWS + AI/Bedrock spend) | headline only | ✓Included | ✓Included | ✓Included |
| AI spend-spike alerts (each scan) | —Not included | —Not included | ✓Included | ✓Included |
viewapp-shell
modepreview
inside the app · after you sign in
illustrative exampleCloudArqSearch audits, findings, connections…⌘K
Settings is a hub linking Profile, Security, Notifications, and more.