# Orthalon pricing and feature access

Last updated: 2026-08-13

Orthalon subscriptions belong to an organization. Protect and Business are billed per active organization member. Annual prices below are billed yearly and show the effective monthly rate for comparison.

## Plan summary

| Plan | Price | Trial | Best for |
| --- | --- | --- | --- |
| Monitor | Free for up to 25 users | Not required | Discovering workforce AI and measuring risk before enforcement |
| Protect | $19 per user/month, or $180 per user/year ($15/month equivalent) | 14 days | Enforcing prompt and readable-file policy across the workforce |
| Business | $35 per user/month, or $348 per user/year ($29/month equivalent) | 14 days | Identity, custom detection, response inspection, and governance evidence |
| Enterprise | Custom | Contracted | Advanced identity, connectors, MCP policy, and regulated deployments |

## Monitor

Monitor provides a safe starting point for a discovery assessment without changing employee requests.

Included:

- Guided AI discovery assessment and global AI risk catalog
- Organization inventory with discovery source and last-seen metadata
- Browser, compatible desktop/IDE, and model API gateway monitoring
- Built-in sensitive-data detection in monitor mode
- Validated US, UK, Brazilian, and Polish national or health identifiers
- Read-only security posture and metadata event views
- Application sanction and review workflow
- 30-day event retention
- Up to 25 users

Not included:

- Redaction, coaching, approvals, or blocking
- Policy authoring and policy testing
- Event or administrative audit exports
- SSO/SAML, SCIM, or advanced roles
- Business content analysis and file extraction
- MCP inventory or runtime policy
- Enterprise identity, SaaS, CASB, and network connectors

## Protect

Protect includes everything in Monitor and adds active workforce enforcement.

Included:

- Monitor, coach, redact, require-approval, and block outcomes
- Prompt and supported readable-file enforcement
- Identity-aware policy templates and policy testing
- Bounded approval and violation workflows
- Managed Chrome and Microsoft Edge rollout
- Firefox pilot support
- Enforcement for compatible desktop/IDE clients and routed model API traffic
- 90-day event retention
- Email support

Protect does not include SSO/SAML, advanced content-analysis qualifiers, PDF/Office/ZIP extraction, evidence exports, response inspection, MCP governance, or Enterprise connectors.

## Business

Business includes everything in Protect and adds identity, advanced detection, response controls, and evidence operations.

Included:

- SSO through supported OIDC and SAML identity providers
- Configurable content match qualifiers and internal-domain exclusions
- Country-identifier checksum validation and company-specific patterns
- PDF, Office, spreadsheet, ZIP, structured-data, and text analysis up to 500 MB per file
- AI response inspection for supported gateway streams and compatible desktop clients
- Governance evidence mapped to the EU AI Act, ISO/IEC 42001, and NIST AI RMF
- CSV/JSON event exports and administrative audit exports
- Versioned evidence records
- 13-month rollup retention

Evidence mappings organize records against common frameworks. They are not a certification or a guarantee that an organization is compliant.

## Enterprise

Enterprise includes everything in Business and adds large-scale identity, discovery, and MCP controls.

Included:

- SCIM provisioning
- Teams and advanced role-based access control
- MCP server and tool inventory
- Allowlisted stdio MCP policy for allow, deny, redact, or require-approval decisions
- Google Workspace, Microsoft Entra ID, Okta, Slack, and GitHub discovery connectors
- Cloudflare Gateway, Zscaler, Netskope, Microsoft Defender for Cloud Apps, Palo Alto Prisma Access, iboss, and Chrome Enterprise telemetry adapters
- Network, DNS, proxy, and CASB imports
- Optional encrypted evidence containing only prompts and responses after detected values are replaced with typed placeholders; disabled by default with 7–90 day retention
- Data-residency options and custom DPA
- Volume pricing, SLA, named contact, and procurement support

Remote HTTP and SSE MCP connections are inventoried but their tool calls are not currently enforced. Network and identity signals show observed access or authorization; they do not prove that Orthalon inspected prompt contents.

## Capability matrix

| Capability | Monitor | Protect | Business | Enterprise |
| --- | :---: | :---: | :---: | :---: |
| Guided AI discovery assessment | Yes | Yes | Yes | Yes |
| Global AI risk catalog and sourced vendor facts | Yes | Yes | Yes | Yes |
| Observed asset inventory and sanctions | Yes | Yes | Yes | Yes |
| Browser, compatible desktop, and gateway monitoring | Yes | Yes | Yes | Yes |
| Active redact, coach, approval, and block decisions | No | Yes | Yes | Yes |
| Policy templates and policy tester | No | Yes | Yes | Yes |
| Personal, managed, and unknown account-context policy | No | Yes | Yes | Yes |
| Approval and violation workflows | Read-only monitor events | Yes | Yes | Yes |
| SSO/SAML | No | No | Yes | Yes |
| Content-analysis qualifiers and 500 MB file inspection | No | No | Yes | Yes |
| Supported AI response inspection | No | No | Yes | Yes |
| Governance evidence and audit exports | No | No | Yes | Yes |
| SCIM, teams, and advanced RBAC | No | No | No | Yes |
| Optional encrypted redacted prompt evidence | No | No | No | Yes |
| MCP inventory and stdio runtime policy | No | No | No | Yes |
| Identity, SaaS, CASB, and network connectors | No | No | No | Yes |

## Protected environments

| Environment | What Orthalon covers | Minimum plan for active enforcement |
| --- | --- | --- |
| Browser extension | Prompts and supported readable files on supported AI websites | Protect |
| Desktop and IDE agent | Compatible clients that accept a configurable model API base URL | Protect |
| AI gateway | Sanctioned applications and services that route supported model API calls through Orthalon | Protect |
| MCP endpoint agent | Local MCP server and tool inventory | Enterprise |
| MCP stdio wrapper | Allowlisted stdio tool-call policy | Enterprise |
| Identity, SaaS, CASB, and network connectors | Discovery and correlation metadata; not prompt inspection | Enterprise |

Business or Enterprise is required for supported response inspection. Fixed-backend applications, pinned TLS, remote HTTP/SSE MCP tools, and unsupported browser flows may be discovery-only.

## Billing and plan changes

- Monitor does not require a paid subscription.
- Protect and Business can be purchased monthly or annually.
- The checkout quantity begins with the current organization member count.
- After subscription, billing changes are managed through the customer billing portal.
- Adding or removing organization members can change the billed seat quantity.
- Enterprise access is provisioned after a sales agreement rather than public checkout.
- Server-side entitlement checks control access even if a client attempts to call a paid operation directly.

After a downgrade, paid-only controls stop applying when the organization policy is recompiled. Existing records remain subject to the retention rules of the resulting plan. Export eligible evidence before a planned downgrade.

## Learn more

- [Plans documentation](/en/docs/plans)
- [Protected environments](/en/docs/environments)
- [Contact sales](/en/contact)
- [Orthalon product summary](/llms.txt)