# Pricing | Chainsaw > Free is two things at $0: a local install guard that runs offline on your machine with no account, and a hosted tier for 3 people that runs all 25 detection signals server-side. Team ($25 per seat per month, 5-seat minimum) adds central policy, SSO/SCIM with no SSO tax, and dashboards; Enterprise (custom quote from $24,000/year) adds on-prem, SIEM and negotiated service terms. All 25 signals on every tier. Source: https://chain305.com/pricing/ --- Pricing # Free guards one machine. Paid runs the whole team's policy. All 25 detection signals run on every tier. You pay for the control plane that scales them across a team. The CLI and policy engine are **open source and auditable**: [github.com/chain305/chainsaw-core](https://github.com/chain305/chainsaw-core) Pricing ## Simple plans that scale with your rollout Start with the free local guard. Upgrade when policy moves into production. ### Free Guard one machine offline, or 3 people on the hosted tier. All 25 signals either way. $0 forever - **Runs locally, no server** - **All 25 detection signals (hosted tier)** - **No account required to start** - Install the CLI in one command, every package manager - Blocks malicious + typosquatted packages at install, on your machine - chainsaw guard update pulls the full public OpenSSF malicious-packages set - Open source: github.com/chain305/chainsaw-core - First run asks once to share anonymous blocked-package data (defaults to yes, decline anytime; never from CI) [Install the guard](https://chain305.com/quickstart) Hosted proxy free tier: 500 MB storage, 1 GB bandwidth, 3 seats. Recommended ### Team One central policy for the whole team — with your SSO, no SSO tax. $25 per seat / month Save 20% · $240 per seat billed yearly - **5 GB storage (fair use)** - **25 GB bandwidth (up + down, fair use)** - **5 to 100 seats** - Everything in Free - SSO (SAML & OIDC) + SCIM provisioning, included - Central policy across the team, monitor → enforce rollout - Billy — policy copilot - Hardening Wizard: K8s admission, egress allowlist, MDM & CI bundle - Shared audit trails & advanced dashboards - Webhooks + priority email support - CI and service tokens are free, never a seat [Start Team](https://chain305.com/chainsaw/signup?plan=pro) Minimum 5 seats. Storage and bandwidth are fair use with no overage billing; contact us if you need more. ### Enterprise Run it your way — on your infra, wired to your stack. From $24,000 per year - **Unlimited storage** - **Unlimited bandwidth** - **Unlimited users, volume seat pricing** - Everything in Team (including SSO & SCIM) - On-prem / air-gapped deployment eligibility - SIEM export (Splunk, Elastic, Sentinel, QRadar) - Ticketing integration (Jira) - Availability terms in your order form + dedicated onboarding [Contact sales](https://cal.com/chain305/30min) Custom annual quote. Over 100 seats, start here. ### Platform & Integrations Volume limits above apply to every plan. Each item below is in the tier or not. Capability Free Team Enterprise Billy — policy copilot · Single sign-on (SAML & OIDC) · SCIM provisioning · Hardening Wizard (K8s, egress, MDM, CI bundle) · On-premise / air-gapped deployment · · SIEM export · · Ticketing integration (Jira) · · Need something custom? ### Over 100 seats, on-prem, or volume pricing Enterprise is a custom annual quote from $24,000 / year with volume per-seat pricing. Bespoke deployment, air-gap or a negotiated contract: a 30-minute call. [Talk to sales](https://cal.com/chain305/30min) **Worked example:** 10 developers on Team cost $200 a month billed annually ($2,400 a year), or $250 a month billed monthly. SSO and SCIM are included, and CI and service tokens are never a seat. **Billed by Paddle**, merchant of record; we never see your card. [14-day money-back guarantee](https://chain305.com/legal/refund/), then a prorated refund for unused time. The local guard asks once on first run before sharing anonymous usage and blocked-package data (defaults to yes, never from CI). `chainsaw telemetry on|off` · [privacy policy](https://chain305.com/legal/privacy/) FAQ ## Pricing FAQ How does per-seat pricing work on Team? Team is $25 per seat per month, or $240 per seat per year billed annually ($20 a month). A seat is a member of your org; CI and service tokens are free and never count. Buy 5 to 100 seats self-serve; above 100, Enterprise prices seats by volume. Is the Free plan really free forever? Yes. The local guard blocks malicious and typosquatted packages offline with no account; the hosted free tier runs all 25 signals for up to 3 people, with no card. What happens if my team goes past Team's storage or bandwidth? Nothing is billed. Team's 5 GB storage and 25 GB bandwidth are fair use, with no overage charges. You get an in-app nudge at 80%; if you need more, contact us. Which plan includes SSO? SSO (SAML & OIDC) and SCIM provisioning are included on Team and Enterprise, at no extra cost: no SSO tax. Password plus TOTP works on Free. Do you offer annual pricing or volume discounts? Toggle annual on the cards to save 20%: $240 per seat per year instead of $300. Enterprise is a custom annual quote from $24,000 a year with volume per-seat pricing. --- ## Long form The full text behind this page, including detail the page itself leaves out. Pricing ### Free guards one machine. Paid runs the whole team's policy. All 25 detection signals run on every tier — you never pay for more protection, only for the control plane that scales it across your team. Billed through Paddle with a 14-day money-back guarantee on every paid plan. The CLI and policy engine are **open source and auditable** — [github.com/chain305/chainsaw-core](https://github.com/chain305/chainsaw-core). Detection layer is not a tier #### All 25 signals fire on Free, Team, and Enterprise. Tiers gate scale (storage, bandwidth, users), team integrations, and deployment shape (on-prem, air-gapped) — never the detection layer or your view of your own data. The free path is a local install guard: one command, no server, no proxy. ``` curl -fsSL https://chain305.com/install.sh | bash ``` That one line installs the CLI and turns the guard on. First run asks once whether to share anonymous usage + blocked-package data to improve detection (defaults to yes; decline anytime; never from CI). Change with `chainsaw telemetry on|off` — see the [privacy policy](https://chain305.com/legal/privacy/). Pricing #### Simple plans that scale with your rollout Start with the local guard — free, zero-infra. Upgrade to the hosted team control plane (with your SSO) when policy moves into production, and flip to Enterprise for on-prem, SIEM, or a negotiated contract. ##### Free Guard one machine offline, or 3 people on the hosted tier. All 25 signals either way. $0 forever - **Runs locally, no server** - **All 25 detection signals (hosted tier)** - **No account required to start** - Install the CLI in one command, every package manager - Blocks malicious + typosquatted packages at install, on your machine - chainsaw guard update pulls the full public OpenSSF malicious-packages set - Open source: github.com/chain305/chainsaw-core - First run asks once to share anonymous blocked-package data (defaults to yes, decline anytime; never from CI) [Install the guard](https://chain305.com/quickstart) Hosted proxy free tier: 500 MB storage, 1 GB bandwidth, 3 seats. Recommended ##### Team One central policy for the whole team — with your SSO, no SSO tax. $25 per seat / month Annual: $20 per seat / mo, billed yearly · Save 20% · $240 per seat billed yearly - **5 GB storage (fair use)** - **25 GB bandwidth (up + down, fair use)** - **5 to 100 seats** - Everything in Free - SSO (SAML & OIDC) + SCIM provisioning, included - Central policy across the team, monitor → enforce rollout - Billy — policy copilot - Hardening Wizard: K8s admission, egress allowlist, MDM & CI bundle - Shared audit trails & advanced dashboards - Webhooks + priority email support - CI and service tokens are free, never a seat [Start Team](https://chain305.com/chainsaw/signup?plan=pro) Minimum 5 seats. Storage and bandwidth are fair use with no overage billing; contact us if you need more. ##### Enterprise Run it your way — on your infra, wired to your stack. From $24,000 per year - **Unlimited storage** - **Unlimited bandwidth** - **Unlimited users, volume seat pricing** - Everything in Team (including SSO & SCIM) - On-prem / air-gapped deployment eligibility - SIEM export (Splunk, Elastic, Sentinel, QRadar) - Ticketing integration (Jira) - Availability terms in your order form + dedicated onboarding [Contact sales](https://cal.com/chain305/30min) Custom annual quote. Over 100 seats, start here. ##### Platform & Integrations Tier-gated capabilities. Volume limits above apply to every plan; the items below are boolean — either included in the tier or not. Capability Free Team Enterprise Billy — policy copilot · Single sign-on (SAML & OIDC) · SCIM provisioning · Hardening Wizard (K8s, egress, MDM, CI bundle) · On-premise / air-gapped deployment · · SIEM export · · Ticketing integration (Jira) · · Need something custom? ##### Over 100 seats, on-prem, or volume pricing Enterprise is a custom annual quote from $24,000 / year with volume per-seat pricing, and adds third-party integrations and on-prem eligibility. If you need bespoke deployment, air-gap, or a negotiated contract, jump on a 30-minute call. [Talk to sales](https://cal.com/chain305/30min) ##### Worked example 10 developers on Team cost $200 a month billed annually ($2,400 a year), or $250 a month billed monthly. SSO and SCIM are included, and CI and service tokens are never a seat. ##### Billing handled by Paddle (merchant of record) Paid plans are sold and billed through **Paddle**, who handles payment processing, tax, and invoices. We never see your card details. Every subscription is covered by a [14-day money-back guarantee](https://chain305.com/legal/refund/) — full refund within 14 days of your first upgrade, prorated refund for unused time thereafter. FAQ #### Pricing FAQ What do I actually get on Team? One central policy enforced across your team's install path, SSO/SCIM, Billy the policy copilot, the Hardening Wizard (a one-click K8s admission, egress allowlist, MDM and CI bundle), shared audit and dashboards, and webhooks. Free protects each machine locally; Team protects the whole team's install path from one place. How does per-seat pricing work on Team? Team is $25 per seat per month, or $240 per seat per year billed annually ($20 a month). A seat is a member of your org; CI and service tokens are free and never count. Buy 5 to 100 seats self-serve; above 100, Enterprise prices seats by volume. Is the Free plan really free forever? Yes. Free is two things at $0. The local guard installs with one command and blocks malicious and typosquatted packages at install time on your machine, offline, with no account. The hosted free tier runs all 25 detection signals server-side for up to 3 people, also with no card. Paid plans start when you want central policy. What happens if my team goes past Team's storage or bandwidth? Nothing is billed. Team's 5 GB storage and 25 GB bandwidth are fair use, with no overage charges. You see usage in the billing dashboard and get an in-app nudge at 80%; if you need more, contact us. Are the supply-chain attack signals included on Team? Yes — all 25 signals fire on Free, Team, and Enterprise. Tier gates apply to control-plane tooling (SSO/SCIM, Billy, and the Hardening Wizard on Team and Enterprise) and to enterprise integrations (SIEM streams, ticketing) and on-prem deployment on Enterprise — never to the detection layer. You never pay for more signals. Can I see and export the SBOM and dependency inventory on Free? Yes — reading and exporting your org's own SBOM and inventory (CycloneDX 1.6 + SPDX) is on every tier; it's your data. Team and Enterprise extend snapshot retention and add advanced dashboards and audit-trail history. Can I change plans at any time? Yes. Upgrade or downgrade from the in-app billing page. Upgrades apply immediately; downgrades take effect at the end of the current billing period. Are webhooks available on every plan? Yes — webhooks are not paywalled; every tier can configure up to five per user for events like blocked installs. Only SIEM streams (Splunk HEC, Microsoft Sentinel, IBM QRadar) and ticketing integrations are Enterprise-only. Does Chainsaw support on-prem or air-gapped deployments? On-prem is Enterprise. The CLI can bake the server URL at build time so air-gapped users never see a public origin. Book a call for custom rollouts. Which plan includes SSO? SSO (SAML & OIDC) and SCIM provisioning are included on Team and Enterprise at no extra cost — we don't gate SSO behind an enterprise-only jump. Password plus TOTP works on Free; invite-based role assignment applies on every tier. Do you offer annual pricing or volume discounts? Yes. Toggle annual on the pricing cards to save 20% versus monthly ($240 per seat per year instead of $300) — billed yearly, self-serve. Enterprise is a custom annual quote from $24,000 a year with volume per-seat pricing; contact sales above 100 seats or for negotiated terms. What support and availability come with paid plans? Team includes business-day support. Enterprise adds dedicated onboarding, and its availability terms are agreed in your order form.