Pricing
Per seat. Transparent. No surprise invoices.
Per-seat pricing for teams and organizations.
Prices are per seat. Model tokens are never on a Caldyr invoice: you bring your own Anthropic, OpenAI or Google key and that provider bills you directly. Budget caps block new sessions once your own spend reaches the cap.
Solo
For individuals: secure agent workflows and memory across your devices, no team needed.
7-day trial, then read-only
- End-to-end encrypted personal vault
- Agent memory synced across your devices
- Run agents on your own hosts
- Secrets encrypted at rest under a per-account key held by our custody service
- Personal session replay & audit (7-day retention on trial, 30 days once activated)
- Teams, shared context & approvals
Most popular
Team
For engineering orgs that need governance without slowdown.
- Configurable seats
- Up to 10 hosts
- Audit signing chain
- Session replay + scrubber
- Budget caps that block, warn or notify
- 90-day audit retention
- Email support · 48h SLA
- Air-gap install
- SIEM streaming, SSO and SCIM (Enterprise)
Enterprise
Whatever your CISO signs off on.
- Unlimited seats & hosts
- OIDC + SCIM 2.0
- Splunk / Datadog / Elastic / Sentinel / S3 WORM / syslog / webhook
- Self-host air-gapped install
- Customer-supplied license JWS
- Custom audit retention, up to 10 years
- 24/7 SLA + named CSM
- Published DPA
Honest comparison
If you've evaluated alternatives, here's how we line up.
| Anthropic Console | Caldyr | |
|---|---|---|
| Per-team budgets | ◐ org only | ✓ |
| Audit signing chain (Ed25519) | ✗ | ✓ |
| SIEM push (Enterprise) | ✗ | ✓ |
| Self-host air-gapped | ✗ | ✓ |
| End-to-end encrypted personal vault | N/A | ✓ |
| Session replay (xterm) | ✗ | ✓ |
| SCIM 2.0 provisioning (Enterprise) | ◐ | ✓ |
| Time to first agent | hours | ≈ 10 min after approval |
| LLM Gateways | Caldyr | |
|---|---|---|
| Layer governed | model API request / response | agent execution on the host |
| Per-session capture + xterm replay | – | ✓ |
| Transcript encrypted at rest (per-team key) | – | ✓ |
| Signed audit chain (Ed25519) | access logs | ✓ |
| Host enrolment + per-team RBAC | – | ✓ |
| Cost attribution | per API key | per repo · team · session |
| Self-host air-gap | some | ✓ |
Complementary, not competitive: gateways route the API traffic; Caldyr proves who ran which agent, on what, under whose key, and caps the spend. Run on top of any gateway.
| Build it yourself | Caldyr | |
|---|---|---|
| Per-team budgets | ✗ | ✓ |
| Audit signing chain (Ed25519) | build it | ✓ |
| SIEM push (Enterprise) | ✗ | ✓ |
| Self-host air-gapped | depends | ✓ |
| End-to-end encrypted personal vault | depends | ✓ |
| Session replay (xterm) | ✗ | ✓ |
| SCIM 2.0 provisioning (Enterprise) | ✗ | ✓ |
| Time to first agent | weeks | ≈ 10 min after approval |
FAQ
Frequently asked
Can I switch tiers mid-billing?
Yes, on request — we change your tier for you. No contract lock.
What happens if I exceed my seat count?
An invite that would exceed your seat count is refused. Contact us and we'll add seats. Enterprise allows 20 % more seats than your licence states before an invite is refused.
How do you handle the BYOK encryption?
Your personal vault notes are encrypted in your browser: Argon2id derives a master key from your passphrase, X25519 wraps the note key, and we store only the ciphertext. Everything else is different — secrets, team knowledge, transcripts and session metadata arrive readable and we encrypt them at rest under a per-team key our custody service holds, because indexing, search and live streaming need the plaintext. The security page has the full per-class breakdown.
Do you support self-hosting?
Yes, on Enterprise. The installer, the signed tarball builder and offline licence tokens are built and tested, and the air-gapped install is exercised in CI under a private network. There is no public download link yet: today the tarball is produced per customer and delivered with a hands-on install, and the customer-facing install guide is still being written.