- 1 cluster
- 1 compliance framework, your choice
- 15 image names per month
- All scanning, signing and admission features
- Public issue tracker
Pricing · billed annually
Every security feature is in the free edition.
Scanning, signature verification, admission enforcement and evidence packages are not held back — a community edition with the security removed would deserve to lose to the free tools. What a key buys is scale, and the two capabilities a regulated estate needs.
- 1 cluster · 1 framework
- 50 image names per month
- Single sign-on (OIDC)
- Strict admission — deny until scanned
- E-mail support
- 3 clusters · 3 frameworks
- 200 image names per month
- Everything in Team
- Priority e-mail support
- Unlimited clusters and frameworks
- Image allowance to fit your estate
- Support terms set in the agreement
- Onboarding help from the people who build it
- Invoicing and procurement paperwork
Additional framework +$2,500 / year · Additional cluster +$2,400 / year
What the key actually changes
| Capability | Community | Paid editions |
|---|---|---|
| Vulnerability scanning | Yes | Yes |
| Signature and attestation verification | Yes | Yes |
| Admission enforcement | Yes | Yes |
| Evidence packages | Yes | Yes |
| Audit log, exceptions, break-glass | Yes | Yes |
| Private registry and mirrored vulnerability database | Yes | Yes |
| Compliance frameworks | 1 | purchased count |
| Clusters per key | 1 | purchased count |
| Image names per month | 15 | purchased band |
| Single sign-on (OIDC) | No | Yes |
| Strict admission (deny until scanned) | No | Yes |
| Support | Public issue tracker | E-mail, prioritised from Business up |
30 days, then it is yours to keep or cancel.
The trial is the full Enterprise feature set. Payment details are taken at signup and the first charge falls on day 31 — cancel before then and nothing is billed. Payments are handled by Paddle, who act as merchant of record: they issue the invoice, handle VAT in your jurisdiction, and we never see a card number.
When a licence expires or a trial ends without a purchase, the installation falls back to Community Edition. It does not stop, and it does not start denying deployments.