Published pricing · no contact-sales gate · 4 tiers + Founder year

The price is on the box.

Every tier is published. Founder Pro locks $299/yr forever for the first 10,000 founders, or anyone who signs up before January 1, 2028 — whichever comes first — across every future renewal, even after the window closes and Regular Pro becomes the standing $500/yr tier. Plex Pass for sovereign cyber, with a hard ceiling so the cohort stays a community, not a queue.

Billing:

Founder Pro is annual-only · Free is $0 · Enterprise is custom

Free

forever

10 endpoints

The whole SOC — free, forever, on your box.

· All 25 OSS connectors (Wazuh, Suricata, ClamAV, nginx, WireGuard, Falco, …)
· Frontier AI included — bring your own OpenAI / Anthropic / Gemini key, or run the bundled local model. Zero cost to you.
· Hash-chained audit log · 100% on-prem · zero telemetry · runs air-gapped
· Warden (triage) + Herald (notify) Guild roles · Trust Ladder 0–3 (v1 write default) · community support

Install free

10K SEATS · LIFETIME LOCK

Founder Pro

$299

per year · locked for life

50 endpoints

Lock $299/yr for life. First 10,000 founders or until Jan 1, 2028 — whichever comes first.

· Pay $299/yr forever. Your renewal price never changes, even when standing Pro goes to $500+.
· Cancel any time, keep what you bought. Local CyberCLI keeps running on the features it had on cancel day — no rug pull.
· Operator-founder tier, not a discount tier. Same Pro feature set + dedicated upgrade path when future product lines launch.

Lock founder pricing →

Pro

$500

per year

50 endpoints

Self-hosted agentic SOC. Standing flagship tier.

· + 4 proprietary connectors today (M365, UniFi); Workspace, CrowdStrike, SentinelOne, Okta, Avanan land on the roadmap
· + Warden triage + Herald notify live today · Knight, Marshal, Paladin ship in v1.1 multi-pass orchestration · Trust Ladder 0–5 · one-click single-action containment when those roles ship
· BYOK frontier (Claude / GPT / Gemini) optional
· Annual saves ~$52/yr · 10% discount built in
· 1-click cancel from /account · no notice period · the cancel button lives next to the renew button, always
· Standing Pro tier — post-Founder window

Choose Pro

Business

$5,000

per year

51–500 endpoints

Sovereign security operations for growing teams.

· + multi-action sequenced plans (Marshal · v1.1) + compliance reports (Scribe · v1.1) — Pro feature roadmap unlocks here when those roles ship
· Compliance role-mapping: SOC2 · HIPAA · PCI · CIS · NIST
· RBAC · priority support SLA · Trust Ladder 0–7 (L6+ requires explicit per-template op-in)
· 1-click cancel from /account · no notice period · the cancel button lives next to the renew button, always

Choose Business

Enterprise

$25,000+

per year · custom

500+ endpoints

Federated private SOC at fleet scale.

· Multi-region federation · region pinning
· + Sovereign federation v1.5 doctrine — advise-only, no remote execution · dedicated tenant
· Dedicated CSM · 99.9% SLA
· Custom connectors · custom retention · custom contract
· Perpetual local fallback: your install keeps running if CyberCLI as a company stops shipping. Local AI + audit chain + connector roster as of cancel/wind-down day. Sovereignty survives us.

Contact sales

Coming soon · v1.5

MSP tier — sovereign cyber for your whole book

A single console for every client you run, with each customer's data, models, and audit chain isolated to their own tenant. We're designing v1.5 with the first MSPs to go live — pricing locks once design partners weigh in.

Federation

Marshal-per-site + a Regent group view across your fleet. Cross-site signal aggregation (anonymized) so a probe at Client A surfaces at Client B before it lands.

Per-customer tenancy

Each client gets their own dashboard, audit chain, license, and LoRA training corpus. They never see each other; you see them all. Hardware-isolated or single-host with per-tenant keys.

Billing & resale

Billing roll-up to your Stripe, your margin model. Per-seat or per-endpoint resale. White-label theming — your logo, your colors, your domain. Customers experience your brand, not ours.

Operator workflow

Cross-tenant operator console. Triage queues that span every customer. SLA per client, escalation playbooks per client, on-call rota per client — all behind one Marshal command line.

Threat intel that compounds

Every client makes every other client safer. A new attacker TTP detected at Tenant 3 distills to an abstract rule pattern (no host names, no users, no IOCs from the source tenant) which propagates to Tenants 1–N within minutes. Raw events stay sovereign to their tenant; only the signed rule artifact crosses.

vCISO / vCTO surface

The eventual Sovereign role: company-wide governance, policy authoring, board-grade reports. For the MSPs who want to grow from cyber-vendor to fractional security leadership.

If you run a managed-services practice and want a seat at the v1.5 design table — say hi here. Founder pricing applies to MSPs who buy individual Pro licenses today; the MSP tier proper is its own SKU once it ships.

Why Founder Pro is locked for life

Forever pricing. Sign up before the first 10,000 founders or before January 1, 2028 — whichever closes first — and you keep $299/yr across every future renewal. Even after the window closes and Regular Pro becomes the standing $500/yr tier.

Buy now, activate later. The license is sticky to your account email. Purchase today and run cybercli init next month, next quarter, or next year — the lifetime lock is yours from purchase date.

Annual-only by design. Founder Pro doesn't offer monthly — that would let buyers grab the lifetime lock for one cycle then cancel. The annual commitment IS what locks the rate. Switch the billing toggle to Monthly and the Founder card stays at $299/yr to make this explicit.

▸ The fine print, in plain English

Perpetual fallback. If you ever cancel — or if CyberCLI as a company changes hands or stops shipping — your local CyberCLI install keeps running with everything it had on the day you stopped. No new connectors, no new LoRAs, no new threat-intel feeds after that, but the box keeps watching. You bought sovereignty; you don't lose it because we did.

Founder-scope guarantee. The $299/yr lock applies to the Pro feature set as defined at your purchase date. Future product lines — Managed Governance, fleet/multi-site, enterprise modules, vCISO services — stay separately priced. You'll never be billed extra for a feature you bought. You'll never get a brand-new product line free because you joined in 2026.

Binge-and-bounce welcome. Re-sub for one month, pull every new connector and LoRA we've shipped since you left, cancel again — same move you make when your favorite show drops a new season. We're not a big corp trying to drain every cent. The cancel button lives right next to the renew button. Always will. Fair warning though: we ship a lot, and we ship fast. The resub move tends to pay off bigger than you'd expect.

"Lifetime lock" is a price commitment that survives ordinary renewals on the standing product. Subject to the cancellation, termination, and material-change provisions in the Terms of Service — including company-control-change and product-discontinuation clauses.

Pricing locked 2026-05-24 · 4-tier ladder + Founder vintage (10k cap / Jan 2028) · MSP tier coming v1.5

Live long and prosper.

And the AI behind it costs…

Your inference, your call.

The subscription above is one number. The AI inference behind your Guild is another — you choose the lane. Below: estimated weekly cost for a Business tier · 50 endpoints · moderate volume deployment (Qwen 2.5 14B locally · Claude Sonnet 4.6 frontier). Switch tiers, models, or workload at the full calculator.

All-Local · est. weekly

Runs on your GPU (10 GB VRAM · ~90 W). Marginal cost is electricity (~$2/wk).

Hybrid · est. weekly

$82

Warden+Herald+Paladin local; Knight+Marshal+Scribe on Sonnet. ~80% cheaper than All-Frontier.

All-Frontier · est. weekly

$426

Every role on Sonnet. No GPU required. Cheapest US frontier (Haiku) lands at ~$60/wk.

Estimates per the v5.6 calculator · refreshed 2026-05-26 · drift quarterly. Adjust endpoints, tier, models, and lane mix interactively at the full tool.

Open full calculator →