Pricing

Tracekit is free and open source. Tracekit Enterprise is for teams.

Open source

Tracekitself-hosted
$0forever

MIT license. No features are held back for paid plans.

For anyone whose agents use real tools

Get started

pip install tracekit-ai · no account

Stable in the release:

  • The signer: dev and Linux system mode
  • tracekit.instrument() for Python agents
  • 4 framework integrations, Claude Code hooks
  • Policy v2 and the shipped packs
  • Approvals bound to the exact arguments
  • Signed bundles, two independent verifiers
  • tracekit view and tracekit doctor

experimental Also in the release: tracekit why (causal replay), detection and containment, agent approvers, Slack, OIDC and passkey approvals, witnesses and a monitor, the LLM and MCP gateways, the tool executor, Postgres and Helm.

github.com/Cygnux-Labs/Tracekit

Organisation

Tracekit Enterprisehosted or on-prem
Custom

Set up for your deployment and your auditors.

For organisations that answer to auditors and customers

Book a call

Talk to us about your deployment

Everything in Team, plus:

  • SSO and roles
  • Evidence packs for SOC 2 and ISO
  • On-prem
  • An SLA
  • A customer trust portal
Deployment and threat model

Team and Organisation are in early access. We are building Tracekit Enterprise now, and each list shows what the plan will include as it rolls out. The open source signer is complete today and will stay MIT licensed.

Pricing questions

Before you choose a plan.

Is the open source version limited?

No. It is MIT licensed and it is the whole signer: policy, approvals, signed records, export, and both verifiers. Nothing in it waits for a paid plan. Tracekit Enterprise adds a hosted place for a team to watch and answer what its agents do.

What is stable and what is experimental
What's in early access?

Tracekit Enterprise, the hosted control room: a team dashboard across agents, an approval inbox in Slack and on the web, alerts, search and retention, and an independent witness. It is not generally available yet, so there is no self-serve sign-up or trial. Book a call and we'll tell you what is ready for your team.

Book a call
Does my data leave my infrastructure?

The signer and its keys stay in yours on every plan. With the open source release alone, data goes only where you configure it: witnesses get checkpoint notes (hashes and sizes), and tool arguments are hashed by default.

Privacy and data flow
Can I self-host everything?

Everything in the open source release, yes: a dev signer on a laptop, Linux system mode, a container or Kubernetes sidecar, or a central signer over HTTPS. Containers, Helm, Postgres and the HTTPS transport are experimental. The Organisation plan adds Tracekit Enterprise on-prem.

Deployment guide

Start with the open source signer. Talk to us about Tracekit Enterprise.