Skip to main content
CloudArq
pricing

Pay per account.
No seat math. No “contact us.”

One subscription = one AWS connection. Tiers gate scan frequency, check coverage, and integrations. Customers with multiple AWS accounts buy multiple subscriptions, or move up to Organization for pooled capacity.

Starter

Try it on one account. Manual scans only.

$0forever
  • 1 AWS connection
  • 44 checks · 6 pillars
  • Up to 50 resources / connection
  • 2 scans / month · on-demand
  • PDF export
  • Email alerts: critical only
  • Cost headline only — upgrade to Pro for the full breakdown, quick wins, and AI-spend insights
  • Community support
recommended

Pro

For the team that owns the AWS account.

$79mo / connection
  • 107 checks · 6 pillars
  • Up to 500 resources / connection
  • 10 scans / month · weekly schedule
  • 5 team members
  • Control mappings: CIS, SOC 2, ISO 27001, GDPR
  • PDF + CSV + JSON export
  • Slack + PagerDuty + Webhook integrations
  • Cost Intelligence — see where your AWS spend (including AI/Bedrock) is going, catch spend spikes and possible LLMjacking, each with the fix
  • Risk-accept workflow
  • Email support

Max

Production-grade. Daily scans, AI-enriched remediation.

$199mo / connection
  • 172 checks · 6 pillars · full depth
  • Up to 2,000 resources / connection
  • 50 scans / month · daily schedule
  • 10 team members
  • Control mappings to all 8 frameworks (CIS, SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST 800-53, GDPR, AWS Well-Architected)
  • REST API access
  • AI-enriched remediation (on-demand)
  • Terraform + CloudFormation IaC templates
  • Cost Intelligence — see where your AWS spend (including AI/Bedrock) is going, catch spend spikes and possible LLMjacking, each with the fix
  • Real-time AI spend-spike & LLMjacking alerts
  • Email support

Organization

Multi-account rollups + SSO.

customcustom · per contract
  • Everything in Max
  • Custom pooled capacity — admin-set per contract
  • 25 team members (raisable)
  • Cross-account dashboards + OU grouping
  • SSO (SAML)
  • Audit log export
  • Signable DPA
  • Volume discount at 4+ AWS accounts
compare

Every difference, laid out.

docs →
featureStarterProMaxOrganization
§ 01 · Scanning
Check count44107172172
Resources / connection505002,000pooled · admin-set
AWS accounts11 / sub1 / subpooled · admin-set
Scan cadenceon-demandweeklydailydaily (configurable)
Cross-regionNot includedIncludedIncludedIncluded
§ 02 · Export & API
PDF reportIncludedIncludedIncludedIncluded
CSV / JSON exportNot includedIncludedIncludedIncluded
REST API accessNot includedNot includedIncludedIncluded
Webhook deliveryNot includedIncludedIncludedIncluded
§ 03 · Alerts & workflow
Email alertscritical onlyall severitiesall + digestall + digest
Slack integrationNot includedIncludedIncludedIncluded
PagerDutyNot includedIncludedIncludedIncluded
Risk-accept workflowNot includedIncludedIncludedIncluded
Remediation runbooksNot includedIncludedIncludedIncluded
AI-enriched remediationNot includedNot includedIncludedon contract
§ 04 · Org & access
Team members151025 (raisable)
SSO (SAML)Not includedNot includedNot includedon contract
Org-wide rollupsNot includedNot includedNot includedIncluded
Audit log exportNot includedNot includedNot includedIncluded
Signable DPANot includedNot includedIncludedIncluded
§ 05 · Support
Channelcommunityemailemailemail + dedicated
Onboarding walkthroughNot includedNot includedNot includedIncluded
§ 06 · Cost Intelligence
Cost Intelligence (AWS + AI/Bedrock spend)headline onlyIncludedIncludedIncluded
Real-time AI spend-spike alertsNot includedNot includedIncludedIncluded