- 1 cluster
- 1 compliance framework, your choice
- 10 image names per month
- 1 node per cluster
- All scanning, signing and admission features
- Public issue tracker
Pricing · monthly or yearly — a year costs ten months
Every security feature is in the free edition.
Scanning, signature verification, admission enforcement and evidence packages are not held back — a community edition with the security removed would deserve to lose to the free tools. What a key buys is scale, and single sign-on.
- 1 cluster · 1 framework
- 50 image names per month
- 6 nodes per cluster
- Single sign-on (OIDC)
- E-mail support
- 3 clusters · 3 frameworks
- 75 image names per month
- 10 nodes per cluster
- Everything in Team
- Priority e-mail support
- Five clusters, every compliance framework
- 100 image names per month
- 20 nodes per cluster
- Offline activation for air-gapped clusters
- E-mail support
- More than ten clusters, or no cluster ceiling at all
- No node ceiling, or whatever was agreed
- A licence issued to whatever was agreed
Additional cluster +$300 / month, up to ten clusters in one checkout · Additional framework +$120 / month · 10 more image names a month +$30 / month for each cluster the licence covers · Additional node +$50 / month per cluster the licence covers, one at a time, up to 50 nodes per cluster — yearly, ten times each, all excl. VAT. On Community a volume step is +$150 / month for each cluster, and additional nodes are not sold — four steps take Community from 10 to 50 image names for $600, Team's own number and price, so the free edition can grow towards the plan above it without undercutting it.
Additional cluster +$3,000 / year, up to ten clusters in one checkout · Additional framework +$1,200 / year · 10 more image names a month +$300 / year for each cluster the licence covers · Additional node +$500 / year per cluster the licence covers, one at a time, up to 50 nodes per cluster — ten times the monthly price, so two months ride free, all excl. VAT. On Community a volume step is +$1,500 / year for each cluster, and additional nodes are not sold — four steps take Community from 10 to 50 image names for $6,000, Team's own number and price, so the free edition can grow towards the plan above it without undercutting it.
Over the node ceiling, nothing stops.
The operator counts the Ready nodes inside the cluster, and the count never leaves it. When a cluster goes over its ceiling, the console and a notification say so, with a date 14 days ahead. After 14 days over the ceiling, only image names not yet seen this period are denied, exactly as at the image allowance; everything already counted keeps running. Coming back within the ceiling clears the clock.
Beyond ten clusters, the price is a conversation.
An uncapped enforcement footprint is not a bigger version of the same thing: how many clusters, in which regions — those are answers a signed agreement carries, not a checkout screen. A licence can be issued to whatever was agreed, on any combination of the three limits, without inventing a plan nobody else is offered.
What the key actually changes
| Capability | Community | Paid editions |
|---|---|---|
| Vulnerability scanning | Yes | Yes |
| Signature and attestation verification | Yes | Yes |
| Admission enforcement | Yes | Yes |
| Evidence packages | Yes | Yes |
| Audit log, exceptions, break-glass | Yes | Yes |
| Private registry and mirrored vulnerability database | Yes | Yes |
| Offline activation for air-gapped clusters | No | Enterprise, annual — or under an agreement |
| Compliance frameworks | 1 | purchased count |
| Clusters per key | 1 | purchased count |
| Image names per month | 10 | plan's number, plus blocks of ten |
| Nodes per cluster | 1 | plan's number, plus nodes bought one at a time |
| Single sign-on (OIDC) | No | Yes |
Strict admission (deny until scanned, failurePolicy: Fail) | Yes | Yes |
| Support | Public issue tracker | E-mail, prioritised from Business up |
Evaluate on the free edition, then buy what you outgrew.
There is no time-limited trial, and there is no need for one. Community Edition carries every security feature and never expires, so the question a trial usually answers — does this work on my cluster — is one you can answer on your own cluster, for as long as you like. What the paid plans add is capacity: clusters, nodes, compliance frameworks and image volume.
Prices exclude VAT. Checkout and payment run on Polar, our merchant of record: the card is entered on Polar's checkout and never reaches our servers, and any tax due is worked out there from your billing address and shown before you pay. A VAT-registered business in the EU accounts for VAT itself under the reverse charge.
When a licence expires without renewal, the installation falls back to Community Edition. It does not stop, and it does not start denying deployments.