Watch
See everything. Change nothing.
Free
Start free- Observe mode, safe on day one
- Live session monitoring
- Slack + email alerts
- 1 cloud account
- Up to 5 teammates
Simple pricing, built for small teams.
Start free and see everything. Turn on the guardrails when you're ready. Bring your own model, so nothing leaves your environment.
Guard
The full guard: read intent, cut the bad session.
$99 /mo
Join the waitlist- Everything in Watch, plus
- AI reads each session's intent
- Automatic session termination
- Just-in-time access + approvals
- IAM over-privilege insights
- Bring your own model
Growth
Multiple accounts, more clouds.
$249 /mo
Join the waitlist- Everything in Guard, plus
- Multiple cloud accounts
- Google Cloud + Kubernetes
- Audit export to your SIEM
- Priority support
Enterprise
Self-hosted, SSO, compliance.
Custom
Talk to us- Everything in Growth, plus
- Self-hosted deployment
- SSO / SAML
- Unlimited teammates
- SOC 2 evidence & compliance help
Priced per cloud account. No card required to start. Cancel anytime.
Compare every plan
| Watch | Guard | Growth | Enterprise | |
|---|---|---|---|---|
| Monitoring & response | ||||
| Live session monitoring | Observe | |||
| AI session-intent analysis | – | |||
| Automatic session termination | – | |||
| Detection rules | – | |||
| Kubernetes (EKS) session guard | – | – | ||
| Access control | ||||
| Just-in-time access + approvals | – | |||
| IAM over-privilege insights | – | |||
| Google Cloud just-in-time access | – | – | ||
| Coverage | ||||
| Cloud accounts | 1 | 1 | Multiple | Unlimited |
| Connect any cloud | ||||
| Teammates | 5 | 25 | 25 | Unlimited |
| Integrations & data | ||||
| Slack alerts + approvals | ||||
| Email notifications | ||||
| Bring your own model | – | |||
| Audit log | ||||
| Audit export to SIEM | – | – | ||
| Trust & support | ||||
| Observe-first, dry-run, kill-switch | ||||
| Self-hosted deployment | – | – | – | |
| SSO / SAML | – | – | – | |
| SOC 2 evidence + compliance help | – | – | – | |
| Support | Community | Standard | Priority | Dedicated |
Questions
Why is it priced per cloud account?
One price covers one cloud account. Add accounts as you grow, so a small team never pays for scale it doesn't use yet.
What does "bring your own model" mean?
Korvalis is model-agnostic. Plug in your own API key and the AI runs on your keys, so no session data ever leaves your environment. You can also use ours with a metered allowance.
Is it safe to install in production?
Yes. Every plan starts observe-first: it watches and logs but changes nothing until you turn enforcement on. Dry-run lets you preview what would be cut, and a one-command kill switch removes Korvalis from the path instantly.
Can we self-host?
On Enterprise, yes. We deploy Korvalis entirely inside your own infrastructure so your data stays with you.