Pricing

Elmoz pricing. What it costs, and what drives it.

Three plans, priced on two things: how many systems Elmoz connects to, and how many agents and machine identities it protects. Not per seat, not per finding.

StarterAnnual subscription
The first production deployment. Built for smaller security and platform teams that want the inventory and the paths before they scale.
First deploymentFixed annual price

A fixed yearly price for a focused scope. No per-seat licence.

GrowthAnnual subscription
Growing security teams. This is where most teams land once agents are running in more than one part of the estate.
Where most teams startScaled to volume

Priced per year and scaled to how much of the estate it covers.

EnterpriseIndividually priced
Large and regulated organizations, where the estate spans several clouds and several identity providers, and an audit trail is not optional.
Multi-cloudIndividually priced

Scoped and priced per organisation.

Extend a planMid-term
A plan is a starting point, not a cage. When one more cloud account, one more identity provider or a larger slice of the estate needs to come in, it is added to the plan you are already on rather than forcing a move up a tier.
Add connectorsAdd protected identities

Both price drivers can be topped up mid-term. Ask and we scope it.

Request pricing

Tell us the size of your estate and we come back with a number, not a brochure.

Please enter a valid work email address.

Goes straight to the founder, not to a sequence. No newsletter, no reseller.

Request received.
We reply from [email protected], usually the same working day.
KEY TAKEAWAYS
  • Three plans: Starter for a first production deployment, Growth for a growing estate, Enterprise for multi-cloud and regulated organisations.
  • The price moves with two things only: how many systems Elmoz connects to, and how many agents and machine identities it protects.
  • No per-seat licence and no per-finding billing. The whole security and platform team works on one subscription.
  • We do not publish a figure, because it depends on the estate. Send the rough shape of yours and you get a real number, not a range.
PLANS

The three plans, side by side.

Same product in all three. What changes is how much of the estate it covers, and that is what the figure follows.

PlanBest forTypical scopeHow it is priced
StarterA first production deploymentOne cloud and the identities around itFixed annual price
GrowthAgents running in more than one placeSeveral connected systemsScaled to volume
EnterpriseLarge and regulated organisationsSeveral clouds and identity providersIndividually priced
PRICE DRIVERS

What actually drives the price.

Two numbers, both of which you can estimate before talking to anyone.

Connectors
Cloud accountsAWS, Google Cloud, AzureSource
Identity providersOkta, Entra, Google WorkspaceSource
Code and CIGitHub, GitLab and the pipelinesSource
MCP serversWhat each tool can callMCP
One: connectors.Each connected system Elmoz reads from to build the graph.
What counts as one
AI agentsCursor, Claude Code, CodexCounts
Service accountsAnd the keys they authenticate withCounts
OAuth grantsEvery standing grant to an AI toolCounts
PeopleSeats are free, the whole team works on itFree
Two: protected identities.Agents, service accounts, grants and keys, each counted once.
Always included
The security graphEvery path, not just a list
Attack path analysisWith the breakpoint
Fix recommendationsThe change that closes the path
Unlimited usersThe whole team, one subscriptionIncluded
Not a driver: people.Seats, findings and queries do not change the price.
CHOOSING

Which plan fits

Most teams start on Growth. Starter is the right call when one cloud and one identity provider cover almost the whole estate.

Enterprise is about shape rather than size: several clouds, several identity providers, and an audit trail someone outside the team will read.

If the honest answer is that nobody has counted the agents yet, that is the usual starting point, and it is the first thing the inventory answers.

Where teams landGrowth is the common one
0Starter
1Growth
2Enterprise
FAQ

Questions, answered.

What is counted, what is not, and what to do when the numbers are still unknown.

What counts as a protected identity?

Every AI agent, service account, OAuth grant and key that Elmoz inventories and traces. Each identity counts once, however many access paths it turns up in.

Is Elmoz billed per seat or per finding?

Neither. The yearly price depends on the number of connectors and the number of protected identities and agents. Everyone on the security and platform team can use it.

Why is there no price on this page?

Because the honest figure depends on how much of the estate Elmoz covers, and a published range would be wrong for almost everyone who reads it. Send the rough shape of your environment and you get a real number, usually the same working day.

What if we do not know how many agents we have?

That is the normal starting point, and it is the first thing Elmoz answers. Give a rough estimate of cloud accounts and developers, and the plan can be adjusted once the inventory is in.

See what your agents can reach. Before someone else does.

Book a demo and we walk through the access paths in an environment like yours.