start with a pilot · priced per host · cancel anytime
Start with a founding pilot — the full product on up to five of your hosts, white-glove installed, for $1,500 a month. If oknek doesn't catch something real in your first week, you owe nothing. When you're ready to scale, it's simple per-host pricing.
founding pilot
$1,500 per month · up to 5 hosts
The full product on your fleet, white-glove installed. Watch oknek stop your own agents in week one — or your money back.
team
$349 per host · per month
Ongoing runtime defense for teams running AI in production. Scales with your fleet.
enterprise
Custom annual · volume + compliance
For regulated workloads, kernel-grade enforcement, and 24/7 incident response.
Not sure how many hosts? Start a pilot and we'll scope it with you — no commitment past 30 days.
plan by plan · every capability
The pilot is the full product — every core capability is included. Team adds scale; Enterprise adds kernel-grade enforcement and compliance.
| Capability | Pilot | Team | Enterprise |
|---|---|---|---|
| oknekd daemon + oknek CLI + shim | ✓ | ✓ | ✓ |
| Full rule pack (R1–R12) | ✓ | ✓ | ✓ |
| Dean — AI security co-pilot (brief · ask · recommend) | ✓ | ✓ | ✓ |
| Real-time enforcement — blocks at the process | ✓ | ✓ | ✓ |
| Tamper-proof audit ledger (Okular) | ✓ | ✓ | ✓ |
| Live dashboard · event feed | ✓ | ✓ | ✓ |
| Dean recommendations → approve → apply | ✓ | ✓ | ✓ |
| Multi-host roll-up dashboard | ✓ | ✓ | ✓ |
| Hourly rule updates | ✓ | ✓ | ✓ |
| White-glove install | ✓ | ✓ | ✓ |
| Unlimited hosts | — | ✓ | ✓ |
| Forensic replay (full agent decision tree) | — | ✓ | ✓ |
| Kernel-grade BPF-LSM enforcement | — | — | ✓ |
| SSO (SAML / OIDC) + SCIM | — | — | ✓ |
| SOC 2 evidence room | — | — | ✓ |
| Off-box WORM audit escrow | — | — | ✓ |
| Air-gapped deployment | — | — | ✓ |
| 24/7 incident response + dedicated CSM | — | — | ✓ |
common questions · plain answers
The complete product on up to five of your hosts, white-glove installed — every detection rule (R1–R12), real-time enforcement, Dean your AI security co-pilot, the tamper-proof audit ledger, and the live dashboard. Not a crippled trial: the pilot is the whole thing.
You continue on Team (per-host, per-month) or Enterprise, or you cancel — no charges beyond the pilot. Cancel anytime during the pilot for a full refund.
We install oknek on your hosts and it watches your agents. If it does not catch something real — a credential read, an unauthorized egress, a dangerous command — that you agree mattered, you owe nothing and you keep the audit log of what we saw.
A host is one machine running oknekd. The pilot covers up to five for a flat $1,500/month. Team is billed per protected host, per month — it scales with your fleet, so you pay for exactly what you protect.
The default install uses a userspace shim — no kernel reconfiguration, no reboot. Kernel-grade BPF-LSM enforcement is available on Enterprise for the strongest, tamper-resistant guarantee.
No. oknek is proprietary and commercial. Licensed customers can audit every detection rule under NDA — auditable, not a black box — but the software is not open source and may not be self-hosted free or redistributed.
No. oknek is a paid security product. The pilot is how you evaluate it — the full product on your own infrastructure, cancel anytime.
Enterprise handles kernel-grade enforcement, SSO/SCIM, SOC 2 evidence, off-box WORM audit escrow, air-gapped deployment, and 24/7 response on a custom annual contract. Write to [email protected].
The fastest way to know if oknek is the right call is to watch it work on your own hosts. Start a pilot — we install it, and within a week you'll see exactly what your agents are doing that's out of bounds. If it catches nothing that matters, you owe nothing.