Pricing
Three tiers. One posture: your keys, your VPC.
Each tier unlocks a different slice of the same Driftlock engine: a sandboxed test runner that drafts audit-linked PRs from your overnight signals. Pick the tier that matches where Sign-off happens today — Team for early adopters, Platform for monorepos, Enterprise for self-hosted and regulated deployments.
Lookups
Every tier checks the same nine pillars below. Differences are depth, not surface area.
Billing
Team is self-serve. Platform and Enterprise go through a scoped trial against one of your real monorepos.
Migration
Moving between tiers keeps your audit trail, signing keys, and CI identity — nothing gets re-cut under you.
Team
For a small team starting to audit their overnight signals.
$199
per seat / month · billed annually
- Watchlistup to 5 repositories
- Sandboxcloud-hosted, hermetic builds
- Outputdaily audit-linked PRs
- Supportemail + community
Platform
For the platform team running the org-wide monorepo.
On request
annual commit · 5-engineer minimum
- Watchlistup to 50 repositories
- SigningCosign + SBOM regen on every PR
- Monoreposhared test cache + topology-aware triage
- Auditdrift alerts tied to your paging rotation
- Supportshared Slack + reply within 4h
Enterprise
For regulated environments and large monorepos.
Talk to us
annual commit · custom MSA + DPA
- Watchlistunlimited repositories
- Deploymentself-hosted in your VPC
- IdentitySSO / SCIM + custom IdP federation
- Dedicatednamed platform engineer on rotation
- SLA99.9% uptime + audit-locked retention
All three tiers ship with the same posture: your keys, your VPC, no third-party LLM calls. Read the compliance posture · See how we meet that bar · By subscribing you agree to our Terms of Service.
Cost comparison
What manual overnight triage actually costs in labour.
The Driftlock subscription on the left, the estimated labour cost of your incumbent overnight-triage rotation on the right. Adjust the three inputs below to your team's reality — the comparison updates proportionally, not by tier.
| Tier | Driftlock subscription | Manual overnight triage (estimate) | Action |
|---|---|---|---|
| TeamFor a small team starting to audit their overnight signals. | $199per seat / month · billed annually | $7,500/monthestimated incident response labour~saves ~$7,500/mo | Start Team |
| PlatformRecommendedFor the platform team running the org-wide monorepo. | On requestannual commit · 5-engineer minimum | $7,500/monthestimated incident response labour~depends on scope | Start a Platform trial |
| EnterpriseFor regulated environments and large monorepos. | Talk to usannual commit · custom MSA + DPA | $7,500/monthestimated incident response labour~depends on scope | Talk to Enterprise sales |
Estimate uses the assumed inputs below — adjust to your team's on-call reality.
- Engineering-hour rate
- 120 USD / hr (fully-loaded senior SRE)
- Incidents per week
- 15 overnight wake-ups
- On-call coverage factor
- 1.4 × raw hours
Fully-loaded hourly cost for a senior platform / SRE in a US-coast market.
Typical volume when Dependabot, CI failures, and on-call alerts all trip the same rotation.
Compensates for rotation overhead and pager false positives vs raw clock time.
~60.8 hrs/mo × $120 = $7,300/mo
Per-pillar detail
Nine pillars that match the engineering you already do.
The same nine capabilities that the rest of Driftlock is built on. Each pillar unlocks at the tier where the underlying buyer — security, platform, or developer — needs it most.
| Pillar | Team | PlatformRecommended | Enterprise |
|---|---|---|---|
| GitHub / CI integrationRepo webhook + job log ingestion via a GitHub App. | Up to 5 repos | Up to 50 repos | Unlimited repos |
| Sandboxed executionHermetic, reproducible build + test runs. | Cloud-hosted sandbox | Cloud + topology cache | Self-hosted sandbox |
| Audit trailEvery PR ↔ its alert, log, or CVE GUID. | PR description links | Drift alerts + paging hooks | Audit-locked retention |
| SBOMCycloneDX SBOM regenerated on every dependency change. | Add-on · per-repo | On every PR | On every PR |
| Commit signingCosign / Sigstore identity per repo. | Add-on · single key | Per-repo key + rotation | HSM-backed + custom policy |
| Monorepo supportTopology-aware triage across a single monorepo. | — | Shared test cache | Per-package policy |
| Self-hosted deploymentDriftlock runs inside your cloud account. | — | Roll-out cohort | Helm + Terraform |
| SSO / SCIMOIDC, SAML, and SCIM provisioning. | — | — | SCIM + custom IdP |
| Uptime SLAUptime commitment + incident response. | — | Best-effort | 99.9% + audit-locked retention |
Pillar reading order maps directly to the home page's Trust strip — same components, same posture.
Tier questions
Choosing a tier, answered.
The questions evaluators ask mid-decision — when the Team cap bites, what flips a buyer to Enterprise, how seats move mid-cycle, how the repo ceiling is enforced, and how the 10-day trial is scoped against your real monorepo.
Buyer questions
The questions your security review will ask.
Three answers we send every regulated buyer. If something else is on your checklist, the scoped trial closes the loop with your platform team in one walkthrough.
Not sure which tier?
Start with a 10-day scoped trial.
We deploy Driftlock self-hosted in your cloud account, point it at two watchlist surfaces for ten days, and ship daily audit-linked PRs. The trial ends with a walk-through of the audit trail so your platform team sees exactly what their reviewers will see.
What lands on your desk
- Read the anonymized evaluator case study → /customers.
- One self-hosted Driftlock deployment in your VPC.
- Two watchlist surfaces — Dependabot and CI — for ten days.
- Daily audit-linked PRs, signed and reviewed together.
- A walkthrough of the audit trail with your platform team.
- See how Driftlock compares to Renovate.
- See how Driftlock compares to Dependabot.
- See how Driftlock compares to GitHub Copilot Coding Agent.
- See how a regulated monorepo team rolled Driftlock out in a week.
- See how a PCI / SOC 2 team closed its overnight-triage and audit-trail gap.
Read next