Pricing
Free during early access. Priced for teams after that.
Free while ExfilPath is in early access
Every capability below is unlocked today at no cost, including the paid-plan features. No card is collected anywhere on this site. Billing begins at general availability, and early-access accounts get 30 days notice and a founding discount before anything changes.
Plans at general availability
Published now so you can plan a budget. Nothing is billed during early access.
Developer
Free during early access
For an individual engineer or a single agent in production.
- 1 developer seat
- Up to 5 projects
- Unlimited analyses, in the app and in CI
- Full path traces with the model boundary marked
- Fix guidance on every open path
- JSON and written report export
- OWASP LLM Top 10 and CWE mapping
- Community support
Team
Free during early access
For a team shipping agents on a shared codebase.
- Everything in Developer
- Unlimited projects and repositories
- Shared report history and path timeline
- Pull-request comments on new and closed paths
- Per-repository policy thresholds
- SARIF export and code scanning integration
- Ownership routing for open paths
- Email support, one business day
Business
Free during early access
For organisations running many agents across many teams.
- Everything in Team
- Organisation-wide path dashboard and trends
- SSO with Google, Microsoft and Okta
- Role-based access and audit trail
- Custom input surfaces, actions and controls
- Release evidence export for audits
- Security questionnaire support
- Priority support with a named contact
Enterprise
Free during early access
For regulated environments and code that cannot leave the network.
- Everything in Business
- Self-hosted or air-gapped deployment
- Private detector packs for internal frameworks
- Architecture review with our research team
- Contractual SLAs and security review support
- Volume and multi-year agreements
- Onboarding and enablement sessions
Prices are in USD and exclude local taxes. Annual billing is charged yearly and saves roughly 20%.
Compare plans in detail
| Capability | Developer | Team | Business | Enterprise |
|---|---|---|---|---|
| Analysis | ||||
| Unlimited analyses | Yes | Yes | Yes | Yes |
| Full path traces and fixes | Yes | Yes | Yes | Yes |
| Projects | 5 | Unlimited | Unlimited | Unlimited |
| Custom detectors | — | — | Yes | Private packs |
| Workflow | ||||
| CLI and CI thresholds | Yes | Yes | Yes | Yes |
| Report history | Personal | Shared | Organisation-wide | Organisation-wide |
| Pull-request comments | — | Yes | Yes | Yes |
| SARIF and code scanning | — | Yes | Yes | Yes |
| Governance | ||||
| SSO | — | — | Yes | Yes |
| Role-based access and audit trail | — | — | Yes | Yes |
| Release evidence export | — | — | Yes | Yes |
| Self-hosted or air-gapped | — | — | — | Yes |
| Support | ||||
| Community support | Yes | Yes | Yes | Yes |
| Email support | — | 1 business day | Priority | Priority + SLA |
| Named contact | — | — | Yes | Yes |
| Architecture review | — | — | — | Yes |
Included on every plan
Path analysis is never the paid part.
Unlimited analyses
No metering on files, repositories or pipeline runs.
Full path traces
Every hop from input surface to action, with the model boundary marked.
Fix guidance
The smallest change that closes each open path, in the language of the file.
Control credit
Routes you have already closed report as closed instead of as noise.
Standards mapping
OWASP LLM Top 10 and CWE on every finding.
Local analysis
Source is read on your own device and never executed.
Deployment
Three ways to run the same analysis.
Web app
Full analysis is live and free during early access. Point ExfilPath at a file or folder and read the report immediately.
CLI and MCP workflows · coming next
The same path engine is being extended to terminal, CI and MCP workflows so teams can bring path checks into the tools they already use.
Self-hosted and air-gapped
Run the analysis entirely inside your own network for environments where source code cannot leave. Available on Enterprise.
Enterprise
For regulated environments and code that cannot leave the network.
What an enterprise evaluation looks like
- 01A scoping call on which agents matter and what an unacceptable path looks like for you.
- 02A pilot analysis on one or two repositories, with the report reviewed together.
- 03A deployment decision: managed, self-hosted or air-gapped.
- 04Rollout with thresholds agreed per repository and evidence export configured.
Pricing FAQ
The commercial questions.
What does early access cost?
What happens when billing starts?
How is a seat counted?
Is annual billing cheaper?
Can we self-host?
Do you offer discounts?
Do we need to talk to sales?
How do we pay?
Start with an analysis, not a signup.
Evaluate the whole platform before you tell us anything about yourself.