Pricing
Blocking is free. Forever.
We do not put a meter on a safety control. Every plan, including the free one, blocks every violating action and keeps the proof. Paid plans add the other half of the control: drift caught and corrected while the agent is still working, and an audit history that reaches further back.
We will never switch off your guardrails over a billing problem. Here is that promise in full.
Hard channel · at the boundary
Stops the action that breaks a rule
Every proposed action is checked against your typed constraints before it executes. A violation does not run, and you get a proof carrying the rule, the actual value, the threshold and a hash of the state it was judged against. Identical inputs always produce an identical verdict, which is what makes the record auditable instead of an opinion.
Soft channel · upstream of it
Catches the drift before it gets there
Causalor reads what your agent is actually doing, identifies where it has drifted from its policy, and writes a correction into the next turn. You never diagnose the drift or author the fix. Every correction's effect is measured on the turns that follow, so the number you see is observed rather than asserted, and it sharpens as it learns each agent.
Two layers of one control. The soft channel works to keep an agent from ever reaching the boundary; the hard channel makes certain that crossing it is impossible. Neither replaces the other, and both are on for every paid plan.
Free
2 agents
The block, forever. Not a trial.
- Deterministic blocking with replayable proofs
- Guardrails derived from your agent
- 7-day audit history
- Drift detection and repair, 14-day trial
- Audit export
- SSO
Team
Most teams10 agents
Both channels on, for a team shipping agents.
- Everything in Free
- Drift detection and repair, always on
- 30-day audit history
- CSV audit export
- Hosted or sidecar in your VPC
- SSO
Business
50 agents
For the fleet, and for the people who audit it.
- Everything in Team
- 1-year audit history
- Scheduled exports
- SSO
- Priority support, shared channel
- Self-hosted deployment
Enterprise
Unlimited agents
Your infrastructure, your retention, your paper.
- Everything in Business
- Self-hosted or private VPC
- Custom retention
- SSO with SCIM provisioning
- SLA, DPA, security review
- Named support contact
Annual billing: two months free. Prices in USD.
The billing promise
Enforcement is never held hostage to an invoice.
If your card fails, if an invoice goes unpaid, if you cancel outright: the hard channel keeps blocking. Every violating tool call is still stopped, and every block still produces a proof. We do not believe a payment dispute is a good reason to cause a production incident.
What does pause is the other half: drift detection, in-flight correction, and how far back the audit record is visible. We give you fourteen days of notice with the exact date before anything changes, and nothing is ever silent.
We never delete your audit data over a billing issue. A lapsed plan narrows the window you can see. It does not erase the record. When you come back, your history is intact, including everything your agents learned while you were away.
Questions people actually ask
What counts as an agent?
One agent identity that Causalor governs, which is the id you pass as X-Causalor-Agent or agent_id. A single service running many concurrent sessions is one agent. Ten distinct bots are ten.
What is the difference between the two channels?
They act at different moments. The soft channel watches how your agent is behaving, finds where it has drifted from its policy, and corrects it on the next turn, before a violating action is ever proposed. The hard channel sits at the commit point and refuses anything that breaks a typed rule, with a proof that reproduces exactly. Most teams want both: one keeps the agent on course, the other makes the boundary absolute.
Do you see our prompts or model keys?
Your provider key is forwarded and never stored. On the sidecar and in-process routes, model traffic never leaves your environment; governance telemetry does cross to the control plane so drift detection can run. If you need zero egress, run hard-channel-only and everything stays local.
What happens at the end of the soft-channel trial?
Corrections stop being generated and the Repairs view goes read-only. Blocking continues untouched, and the effectiveness measured during your trial stays in your history.
How do you measure that corrections actually work?
When a correction is applied we keep watching the same agent on its following turns and measure how much of the original drift is still present. That residual is the score. It is computed from observed behaviour after the fact, which is why the number in your dashboard moves and is not a round one.
Can we self-host?
The sidecar gateway runs in your VPC on any paid tier. A fully self-hosted control plane, including the drift pipeline, is an Enterprise arrangement.
Two minutes to your first proof
No credit card. The free tier is a real product, not a countdown.