Plans and feature access
Compare Orthalon Monitor, Protect, Business, and Enterprise pricing, protected environments, retention, identity, and MCP features.
Orthalon subscriptions belong to an organization and are billed per member. Changing a plan affects the controls available to every sensor and administrator in that organization.
Plan summary
| Plan | Price | Best for |
|---|---|---|
| Monitor | Free, up to 25 users | Discovering workforce AI and measuring risk before enforcement |
| Protect | $19 per user monthly, or $180 per user yearly | Enforcing prompt and readable-file policy across the workforce |
| Business | $35 per user monthly, or $348 per user yearly | Identity, custom detection, response inspection, and governance evidence |
| Enterprise | Custom | Advanced identity, connectors, MCP policy, and regulated deployments |
Protect and Business include a 14-day trial. Annual prices are billed as the yearly total per seat. Enterprise is arranged through Contact sales rather than public checkout.
Feature matrix
| Capability | Monitor | Protect | Business | Enterprise |
|---|---|---|---|---|
| Guided AI discovery assessment | Yes | Yes | Yes | Yes |
| Global AI risk catalog and sourced vendor facts | Yes | Yes | Yes | Yes |
| Observed asset inventory and sanctions | Yes | Yes | Yes | Yes |
| Browser, compatible desktop, and gateway monitoring | Yes | Yes | Yes | Yes |
| Detection in Monitor mode | Yes | Yes | Yes | Yes |
| Redact, coach, require approval, and block | No | Yes | Yes | Yes |
| Policy templates and policy tester | No | Yes | Yes | Yes |
| Personal, managed, and unknown account-context policy | No | Yes | Yes | Yes |
| Approval workflow | No | Yes | Yes | Yes |
| Violations | Read/monitor | Yes | Yes | Yes |
| SSO and SAML | No | No | Yes | Yes |
| Supported gateway and desktop response inspection | No | No | Yes | Yes |
| Content-analysis qualifiers and 500 MB file inspection | No | No | Yes | Yes |
| Governance evidence and audit export | No | No | Yes | Yes |
| SCIM, teams, and advanced roles | No | No | No | Yes |
| MCP inventory and stdio runtime policy | No | No | No | Yes |
| Identity, SaaS, CASB, and network connectors | No | No | No | Yes |
The server enforces these boundaries. Hiding or manually calling a client-side screen does not bypass the organization entitlement.
Environment coverage
| Environment | Coverage | Minimum plan for active enforcement |
|---|---|---|
| Browser extension | Prompts and supported readable files on supported AI websites | Protect |
| Desktop and IDE agent | Compatible clients that accept a configurable model API base URL | Protect |
| AI gateway | Sanctioned applications and services that route supported model API calls through Orthalon | Protect |
| MCP endpoint agent | Local MCP server and tool inventory | Enterprise |
| MCP stdio wrapper | Allowlisted stdio tool-call policy | Enterprise |
| Identity, SaaS, CASB, and network connectors | Discovery and correlation metadata, not prompt inspection | Enterprise |
Business or Enterprise is required for supported response inspection. Fixed backends, pinned TLS, remote HTTP/SSE MCP tools, and unsupported browser flows may be discovery-only.
Upgrade or manage billing
Open Administration → Organization → Billing. The checkout quantity is the current organization member count. Adding or removing members can therefore change the subscription quantity.
- Monitor requires no Stripe subscription.
- Protect and Business can be purchased monthly or yearly.
- Enterprise uses a manually provisioned organization entitlement after a contract is completed.
After upgrading, refresh the organization and verify the active plan on the billing page before activating paid controls.
What happens after a downgrade
Existing data remains subject to its retention policy, but unavailable controls must not continue enforcing beyond the new plan. In particular, a Monitor organization cannot keep redact, block, or approval decisions in a compiled sensor policy bundle.
Before a planned downgrade, export any evidence you are entitled to retain, return paid-only policies to Monitor, and confirm sensors receive the new policy bundle.
Run your first monitored rollout
Enroll a small pilot, observe AI use safely, tune policy, and activate enforcement without surprising employees.
Choose your protected environments
Understand where Orthalon observes, enforces, and discovers AI use across browsers, desktop applications, APIs, networks, and MCP clients.