Pricing

From one builder to the whole enterprise. Governance always included.

Per-seat plans with pooled governed runs. Every tier — including Individual — ships the full fail-closed gate chain, cost caps, and the tamper-evident Trust Ledger. You never pay extra for the ability to govern.

14-day Team trial · no credit card · hard caps fail-closed at 100% (402)

Cost Governance
78%
$7,820
of $10,000 · 30-day cap
Hours saved
1,240h
Cost avoided
$312,000
budget ▸ hard cap blocks runs at 100% (402)
Plans

Three plans. One governed runtime.

Individual and Team are self-serve — start today. Business is sized to your fleet, environments, and audit demands.

Annual — 2 months free

Individual

$16/user/mo

$192/user billed annually

For builders automating their own work.

Usage
  • Full core skills catalog + library installs
  • 5 active agents · 500 governed runs / mo
  • Single-player workflows, manual triggers
  • Full 8-gate governance runtime — always
  • 30-day run history · standard connectors
  • Community + email support
Start free trial
MOST POPULAR

Team

$32/user/mo

$384/user billed annually

For teams shipping agents together.

Usage
  • Everything in Individual, plus:
  • 25 agents per member · 2,000 runs / user / mo, pooled
  • Shared studio: drafts, review, versioning, templates
  • Scheduled + event workflows with approval steps
  • Oversight console · 90-day audit trail · SSO
  • Premium connectors + API · priority support
Start free trial

Business

Custom

Annual agreement

For organizations that need governance at scale.

  • Everything in Team, plus:
  • Unlimited agents · custom pooled run commitments
  • Policy engine, approval boards & fine-grained RBAC
  • SAML/OIDC + SCIM · immutable audit + SIEM export
  • Data residency · VPC, on-prem & air-gapped deployment
  • Custom connectors · dedicated CSM · 99.9% uptime SLA
Contact sales

14-day full-featured Team trial · no credit card · prices exclusive of tax · run allowances pool across the workspace, overage bills per run in arrears

How runs work

One meter, no surprises.

Agents do work in governed runs. Here's exactly how the meter behaves — before procurement has to ask.

1 · An agent acts

Every invocation passes the 8-gate chain and lands in the ledger — executed, held, or blocked. That's one run.

2 · Runs pool across your team

On Team, 2,000 runs per user merge into one workspace allowance. Heavy operators draw from the pool — nobody hits a personal wall.

3 · Overage never interrupts

Past the allowance, runs bill per run in arrears at the published rate in your console. The meter warns early; workflows never stop mid-run.

What's always included

Governance isn't a line item. It's the runtime.

On most platforms, controls are an enterprise upsell. On Cortex, you cannot run an agent without the full gate chain — on every plan, including Individual. You pay for governed compute, never for the ability to govern it.

  • Every run passes 8 gates: identity → budget → guardrails → registry → control-tower → policy → execute → audit
  • Hard cost caps fail-closed at 100% — a runaway agent is blocked with a 402 before spend
  • Out-of-policy actions return 403; conflicting writes return 409 — deny is the default
  • Every outcome lands in a tamper-evident ledger (hashOk:false flags any edit)
audit/verify
#101hash ✓#102hash ✓#103hash ✓#104hash ✓#105hash ✓
head 0x9f3a…c1ok: true
verifyChain ▸ chained SHA-256 · signed receipts
Compare plans

Every feature, side by side.

The governance runtime is identical across plans — what scales is agents, pooled runs, workflow depth, identity controls, deployment, and support.

FeatureIndividualTeam
Most popular
Business
Skills library
Core skills catalog + library installs
Premium & verified skills
Private team skills with versioning
Curated org catalog + approval policies
Agents & Studio
Active agents525 / memberUnlimited
Shared studio (drafts, review, versioning)
Team templates
Sandbox + staging environments
Runs & Workflows
Included governed runs / month5002,000 / user, pooledCustom, pooled
OveragePer run, in arrearsPer run, in arrearsVolume commitments
WorkflowsManual triggersScheduled + event + approvalsCross-team orchestration
Human-in-the-loop approval steps
Governance & security (runtime included in every plan)
Fail-closed gate chain (8 gates)
Tamper-evident Trust Ledger
Audit trail retention30 days90 daysCustom + SIEM export
SSOGoogle & MicrosoftSAML/OIDC + SCIM
RBACWorkspace rolesFine-grained + policies
Data residency · VPC / air-gapped
Integrations & support
ConnectorsStandardPremium + APICustom-built
SupportCommunity + emailPriorityDedicated CSM
Uptime SLA99.9%
Security-review concierge
What you pay for

A run is a governed invocation — executed, held, or blocked.

You pay for governed compute, not just successful output. Held and blocked attempts still produce a ledger entry — that's the point.

Executed

Executed

Passed all 8 gates, acted, and wrote a signed receipt to the ledger.

Hold

Held

Stopped at an oversight gate for human approval — recorded, replayable, awaiting sign-off.

Blocked

Blocked

Denied at a gate — 402 over budget, 403 out of policy, 409 on conflict.

audit/verify
#101hash ✓#102hash ✓#103hash ✓#104hash ✓#105hash ✓
head 0x9f3a…c1ok: true
verifyChain ▸ chained SHA-256 · signed receipts
Business

Run Cortex your way.

Regulated enterprises deploy Cortex in their own boundary: VPC, on-premise, or fully air-gapped, with data residency pinned per tenant and the Trust Ledger intact. Your security reviewers get a concierge, not a PDF chase.

  • Single-tenant, VPC, on-prem & air-gapped deployment options
  • SAML/OIDC + SCIM, fine-grained RBAC, immutable audit + SIEM export
  • Contractual no-training guarantees, custom retention & residency
  • Dedicated CSM, 99.9% uptime SLA, security-review concierge
Pricing FAQ

The awkward questions, answered first.

What counts as a run?

A run is one governed agent invocation that passes through the 8-gate chain and produces a ledger entry — whether it executes, is held for human approval, or is blocked (402/403/409). Example: an agent that reads a claim, drafts a summary, and proposes a payout is one run; if the payout crosses your approval threshold and waits for sign-off, it is still one run.

What happens when we hit our run limit?

Nothing stops mid-workflow. Runs past your included allowance bill per run, in arrears, at the published overage rate shown in your plan console — and your usage meter warns you well before you get there. There are no prepaid credit walls and no mid-run cutoffs.

Need more than the included runs?

Pick a usage expansion on the plan card — 5× or 10× the included runs per seat, on the same plan with the same governance. 10× is priced sub-linearly (10× the usage for 9× the price). Switch tiers anytime; changes prorate to your billing cycle, and per-run overage remains available past any tier.

Are runs pooled across the team?

Yes. On Team, every member's 2,000 monthly runs pool into one workspace allowance — heavy operators draw from headroom that lighter users leave. Business plans size a custom pooled commitment with volume discounts.

Do you train models on our data?

No. Your prompts, documents, and run outputs are never used to train models — on any plan. Business adds contractual no-training guarantees, custom retention, and data-residency controls.

Is governance an add-on or extra cost?

Governance is never an add-on. The fail-closed gate chain — Agent IAM, cost caps, guardrails, policy-as-code, oversight modes, and the tamper-evident Trust Ledger — is included in every plan, including Individual. You cannot run an agent on Cortex without it.

How do seat changes and proration work?

Add seats any time — they prorate to your billing cycle from the day they activate. Removed seats stay usable until the cycle ends and stop billing at renewal. Mixing plan changes mid-cycle prorates the difference; you never pay twice for the same period.

What's in the free trial?

The trial is 14 days of the full Team plan — shared studio, pooled runs, oversight console, SSO — with no credit card required. When it ends you pick a plan; nothing is deleted while you decide.

Which SSO options come with which plan?

Team includes Google and Microsoft single sign-on. Business adds SAML/OIDC, SCIM provisioning, and fine-grained RBAC mapped to your identity provider's groups.

Can we deploy on-premise or in an air-gapped environment?

Yes — on Business. Single-tenant, VPC, on-premise, and air-gapped deployments are supported, with data residency pinning. Signed Solution Packs verify by hash and signature offline, so governed solutions install into environments with no outbound connectivity.

Which compliance frameworks is Cortex aligned with?

Cortex is built for and aligned with SOC 2, ISO 27001, ISO 42001, HIPAA, GDPR, the EU AI Act, NIST AI RMF, and FINRA. We are not making certification claims on this page — visit the Trust Center for current attestation status and security documentation.

We budgeted for a governance project on top of the platform cost. With Cortex there wasn't one — the controls our auditors wanted shipped on day one, on the plan we already had.
VP, Platform EngineeringRegulated healthcare provider

Start with a free trial. Scale when it works.

14 days of the full Team plan, no credit card. When you're ready for residency, SSO/SCIM, or air-gapped deployment — talk to sales.