Simple pricing per database
Pay per database per month, plus a generous monthly allowance of protected queries. From Pro, the proxy deploys in your VPC. On Business and Enterprise, AI classification deploys in your VPC too, so your data never leaves your environment. With annual billing, you get 2 months free.
Plans
Two value-metrics: databases and protected queries. No per-seat charges, no per-agent charges. Every paid tier supports unlimited protected databases.
| Plan | Price | Deployment/AI | Included queries | Overage | Best for |
|---|---|---|---|---|---|
| Free | Coming soon | Cloud-hosted/None | 25k / month | Hard cap | Try Safe Boundary |
| Startup | Coming soon | Cloud-hosted/None | 250k / DB / mo | — | First production AI agent |
| Pro | Coming soon | VPC/Cloud-hosted | 2M / DB / mo | — | Main production plan |
| Business | Coming soon | VPC | 10M / DB / mo | — | Regulated & multi-tenant SaaS |
| Enterprise | Custom | VPC | Custom, pooled | Negotiated | Dedicated, high-volume, regulated |
Pricing details are being finalized; please get in touch for early-access pricing.
Feature matrix
Everything in every tier, in one place. Scroll horizontally on small screens.
| Feature | Free | Startup | Pro | Business | Enterprise |
|---|---|---|---|---|---|
| Deployment | |||||
| Proxy | Cloud-hosted | Cloud-hosted | In your VPC | In your VPC | In your VPC |
| AI classification | Cloud-hosted | In your VPC | In your VPC | ||
| Limits | |||||
| Databases | 1 | Unlimited | Unlimited | Unlimited | Unlimited |
| Queries / month | 25k | 250k / DB | 2M / DB | 10M / DB | Custom |
| Custom rules | 3 | 3 | Unlimited | Unlimited | Unlimited |
| Query log retention | 7 days | 30 days | 1 year | 1 year | Custom |
| Dry-run window | 7 days | 30 days | 30 days | 30 days | Custom |
| Detection & masking | |||||
| Built-in blocking presets | |||||
| Deterministic PII detection | |||||
| AI SQL rewriting (preview) | |||||
| AI SQL rewriting (production) | |||||
| Automated PII masking | |||||
| Custom PII / PHI detectors | |||||
| Multi-tenant | |||||
| Proxy-layer RLS | |||||
| Tenant-condition injection | |||||
| Identity & access | |||||
| Email/password + GitHub | |||||
| Google sign-in | |||||
| SAML 2.0 / SCIM 2.0 / RBAC | |||||
| Observability | |||||
| Full-text log search | |||||
| Log forwarding (Slack, Datadog, Splunk, Elastic, Sumo, Chronicle, New Relic) | |||||
| Basic anomaly detection | |||||
| Advanced UEBA + drift alerts | |||||
| Compliance | |||||
| HIPAA BAA | |||||
| SOC 2 / HIPAA / PCI / GDPR report packs | |||||
| SOC 2 Type II report under NDA | |||||
| Enterprise operations | |||||
| Read-replica routing | |||||
| Per-identity rate limits | |||||
| Multi-region active-active proxy (99.99% SLA) | |||||
| Approval workflows for high-risk ops | |||||
| Cross-database policy management | |||||
| Threat intelligence feed | |||||
| BYOK + HSM | |||||
| On-prem / air-gapped | |||||
| FedRAMP path | |||||
| Support | |||||
| Support | Community | Email, 24h | Email, 4h BH | 24/7 chat + phone, 1h P1 (10+ DBs) | Dedicated SE + CSM |
Which plan fits your usage
Best for teams running one production database at low-to-mid volume. Move to Pro when you need higher query allowances, full AI rewriting, automated PII masking, or SSO.
The default production plan, with 2M queries per database per month, full AI rewriting, proxy-layer RLS, SSO, and SIEM forwarding. Upgrade when you need HIPAA BAA, compliance evidence packs, or in-VPC deployment.
For regulated workloads and multi-tenant SaaS. Includes 10M queries per database per month, in-VPC deployment, BAA, SOC 2 / HIPAA / PCI / GDPR evidence, and a 99.99% multi-region SLA. Move to Enterprise once you need pooled volume across many databases, BYOK + HSM, on-prem / air-gapped deployment, or a FedRAMP path.
Questions about Enterprise?
Pooled volume across your fleet, on-prem and air-gapped deployment, BYOK + HSM, FedRAMP path, and a dedicated SE and CSM — we’ll tailor a contract to your environment.
Configure your first rewrite rule , no application code changes required.
Start free on one database. Move up a tier when you need a feature, not because you've hit a cap.