Pick your plan. Your data stays yours.
Free for one device. Pro for individuals and small teams. Team for 5–25 devices with SSO and fleet control. Enterprise for large-scale deployments.
Kernel-level tagging (WFP / Netfilter / VpnService) — every connection attributed to an app, not just a port.
Per-tenant baselining surfaces unusual traffic spikes before they become incidents — no rule-writing required.
Detect & control AI app traffic (ChatGPT, Claude, Copilot, local LLMs, MCP, agents). Pro and above.
Automated user provisioning and de-provisioning. Works with Okta, Azure AD, Google Workspace out of the box.
Customer-managed encryption keys for at-rest audit data. Your key, your cloud KMS — we never see it.
Transparent pricing. No hidden fees.
or £100 / year
- Up to 3 devices
- 90-day flow history
- Decoded flow inspection
- Anomaly detection
- AI traffic visibility (assistants, APIs, local LLMs)
- AI-worm detection — LLM egress + C2 polling heuristics (early access)
- Priority email support
- 14-day free trial, no card
Create account · No card required · Uninstall anytime.
5 seats × £35
- For teams of 5-25 devices
- SSO/OIDC + SAML
- SCIM provisioning
- Fleet policy push
- Anomaly detection
- + Org-level AI analytics + policy rules
- Multi-tenant admin console
Create account to subscribe · Stripe-secured.
100 seats included · scoped to fleet
- Centralised admin (25+ devices)
- SSO (SAML / OIDC) + SCIM
- SIEM webhook
- Silent MDM install
- Volume licensing
- AI-worm detection — fleet-wide swarm signal + SIEM forwarding (early access)
- + SOC dashboard + DLP integration
- Dedicated account contact
Standard DPA + MSA on request · Redlines welcome.
Keep raw telemetry on-prem. Cloud sees only signed digests.
UK GDPR Art. 44 · DORA · BSI C5 · NIS2 aligned. MSA + DPA addendum + SOC2 / ISO27001 evidence pack on request.
- All Enterprise features
- Customer KMS encryption
- On-prem object storage
- Sales-quoted (no self-serve)
- 2 devices · 14-day flow history
- Real-time per-app traffic
- Destination IP / country / protocol
- Community support
- Upgrade to Pro for AI traffic intelligence and anomaly detection
What's included in each plan
| Feature | Free | Recommended Pro | Team | Enterprise |
|---|---|---|---|---|
| Devices | 2 | 3 | 5-25 | Volume quote |
| Flow history | 14 days | 90 days | 1 year | Custom |
| Real-time per-app traffic | ||||
| Anomaly detection | — | |||
| AI traffic visibility | — | |||
| AI-worm detection (early access) | — | |||
| Decoded flow inspection | — | |||
| SSO (SAML / OIDC) | — | — | ||
| SCIM provisioning | — | — | ||
| Fleet policy push | — | — | ||
| Multi-tenant admin | — | — | ||
| SIEM webhook (OCSF) | — | — | — | |
| Silent MDM install | — | — | — | |
| BYOK / customer CMK | — | — | — | |
| SOC dashboard | — | — | — | |
| Dedicated CSM | — | — | — | |
| SLA | Community | Priority email | Priority email | 99.9% uptime |
Hybrid tier (regulated industries) adds BYOK, on-prem collector, and custom retention. See Hybrid architecture for details.
Add-ons for regulated deployments
Enterprise and Hybrid customers can layer on advanced controls. All quoted as part of the annual contract.
Bring Your Own Key — supply your AWS KMS, Azure Key Vault, or GCP Cloud KMS ARN. We never hold your key.
Raw event data stays on your network inside your VPC. Cloud sees only Ed25519-signed daily digests.
A named customer success manager. Quarterly business reviews, compliance-pack requests, pilot co-build.
Standard MSA + DPA; redlines welcome. BAA available for HIPAA-adjacent deployments on Private tier.
Same client. Different lenses.
Pro gives you a single-device console. Team + Enterprise add a multi-tenant admin console on top of the same flow records — no second agent, no schema fork.
| App | Bytes | Verdict |
|---|---|---|
ChatGPT Desktop | +2.4 MB/min | |
Claude Desktop | +1.8 MB/min | |
Slack | +6.4 MB/min | |
Dropbox | +14.2 MB/h | |
Spotify | +0.9 MB/min |
| Hostname | Last seen | Status |
|---|---|---|
| workstation-001 | 2 min ago | active |
| mbp-finance-04 | 5 min ago | active |
| devbox-01 | 14 min ago | active |
| pos-store-12 | 47 min ago | idle |
Built for data sovereignty.
- No telemetry
- On-device storage
- UK GDPR · EU GDPR
- Cancel any time
- Ed25519-signed digests (Hybrid)
- mTLS in transit
- RBAC enforced
- SOC 2 Type II (Enterprise)
Start free. Upgrade when you need to.
Free tier — no account needed. Install and see your app traffic in minutes. Upgrade to Pro when you want anomaly detection and AI traffic visibility.
No card required · Windows / Linux / Android · Your data stays on your device