Pay for what you protect, not for headcount
Pricing is per protected resource: each host, database or cluster behind CyberNest. Users are unlimited on every plan. Save 15% with annual billing.
Team
For teams replacing shared SSH keys and database passwords.
$9
per protected resource / month
Minimum 10 resources ($90/month)
- Unlimited users and reviewers
- SSH, Postgres, MySQL, MongoDB, Kubernetes
- Single-approver rules
- Session recording, 30-day retention
- Okta, Entra ID, Google Workspace, JumpCloud
- Email support, 1 business day
Scale
Most teamsFor teams with contractors, on-call rotations and audit requests.
$15
per protected resource / month
Minimum 25 resources ($375/month)
- Everything in Team
- Multi-approver and on-call auto-approve rules
- Session recording, 1-year retention
- SCIM sync and device posture checks
- Audit log streaming to your SIEM
- Email support, 4 business hours
Enterprise
For larger estates with custom retention or deployment needs.
Custom
annual agreement
Typically 200+ resources
- Everything in Scale
- Custom recording retention
- Recordings stored in your own S3 bucket
- Named support contact
- Security questionnaire support
- Invoice billing
Plan comparison
| Limit | Team | Scale | Enterprise |
|---|---|---|---|
| Users | Unlimited | Unlimited | Unlimited |
| Connectors | Up to 5 | Up to 25 | Unlimited |
| Max grant duration | 12 h | 12 h | Configurable |
| Recording retention | 30 days | 1 year | Custom |
| Audit log export | JSON, CSV | JSON, CSV, streaming | JSON, CSV, streaming |
| Support response | 1 business day | 4 business hours | Agreed in contract |
Billing questions
Something not covered? Email info@cybernestlabs.xyz. See also our Refund Policy.
What counts as a protected resource?
Each SSH host, database instance or Kubernetes cluster registered in CyberNest. A Postgres instance with ten databases is one resource. A cluster with many namespaces is one resource.
Do you charge per user?
No. Every plan includes unlimited requesters and reviewers, so adding contractors or new on-call engineers does not change your bill.
Is there an annual discount?
Yes. Annual billing on Team and Scale is 15% lower than paying monthly.
What happens when the trial ends?
The workspace pauses until you choose a plan. Nothing is charged during the 14-day trial and your configuration is kept for 30 days.
Can I change plans or resource counts?
Yes. Adding resources is prorated for the current month. Removing resources takes effect at the next billing date.
Are taxes included?
Prices are in US dollars and exclude applicable sales tax. Refunds are handled under our Refund Policy.