premium · proprietary · per server
Premium, proprietary runtime defense, priced per server from $99/month. Paid tiers unlock hourly threat-intel updates, the dashboard, multi-server roll-up, forensic replay, SLAs, and support. Source is available to licensed customers under NDA for audit. Request access for a scoped pilot.
pilot
Request scoped to your fleet
A scoped pilot on your fleet with white-glove onboarding. Priced on a call.
pro
$99 per server · per month
For small teams running AI in production.
business
$349 per server · per month
For shops doing client work + compliance posture.
enterprise
$999 per server · per month
For regulated workloads + 24/7 incident response.
above enterprise · custom annual contracts · regulated workloads · co-engineered detection rules · 50+ servers — write to [email protected].
tier by tier · every capability
Twenty-two capabilities across four tiers. Read across each row to see exactly what's included. Underlined names link to docs (coming soon).
| Capability | Pilot | Pro | Business | Enterprise |
|---|---|---|---|---|
| oknekd daemon + oknek CLI | ✓ | ✓ | ✓ | ✓ |
| Base rule pack (R1–R7) | ✓ | ✓ | ✓ | ✓ |
| Community Discord | ✓ | ✓ | ✓ | ✓ |
| Source available to licensed customers (NDA) | ✓ | ✓ | ✓ | ✓ |
| Monthly rule updates | ✓ | ✓ | ✓ | ✓ |
| Hourly rule updates | ✓ | ✓ | ✓ | ✓ |
| 24h SLA on disclosed AI-agent CVEs | ✓ | ✓ | ✓ | ✓ |
| Slack / Discord / email alerts | ✓ | ✓ | ✓ | ✓ |
| Web dashboard · event timeline | ✓ | ✓ | ✓ | ✓ |
| Priority Discord support | ✓ | ✓ | ✓ | ✓ |
| Multi-server roll-up dashboard | — | — | ✓ | ✓ |
| Custom rule authoring | — | — | ✓ | ✓ |
| Forensic replay (full agent decision tree) | — | — | ✓ | ✓ |
| Threat intelligence feed | — | — | ✓ | ✓ |
| Compliance overlays (SOC2 / HIPAA / PCI) | — | — | ✓ | ✓ |
| 4h support response SLA | — | — | ✓ | ✓ |
| SSO (SAML / OIDC) | — | — | — | ✓ |
| SCIM provisioning | — | — | — | ✓ |
| SOC 2 evidence room | — | — | — | ✓ |
| Air-gapped deployment | — | — | — | ✓ |
| 24/7 incident response | — | — | — | ✓ |
| Dedicated Customer Success Manager | — | — | — | ✓ |
common questions · plain answers
The complete product on a scoped set of your servers, with white-glove onboarding — every detection rule, hourly rule updates, all alerts, the dashboard, the 24h CVE-shipping SLA — so your team sees oknek catch something real on your infrastructure.
Per server, per month, billed monthly or annually (annual saves ~16%). We scope a pilot and price it to your fleet on a call.
No. oknek is a paid, proprietary product. We run scoped pilots so you can evaluate it on your own servers before committing.
Yes. Upgrade or downgrade at any time. Prorated to the day.
Annual billing saves ~16% versus monthly across Pro, Business, and Enterprise. Same product, longer commitment.
Pricing on the page is per-server flat. Volume discounts start at 25 servers — write to [email protected].
Cancel anytime in the first 30 days of a paid plan for a full refund, no questions asked. We do not pro-rate refunds after day 30 — but you can downgrade or cancel future billing immediately.
No. oknek is proprietary and commercial. Licensed customers can audit every detection rule under NDA — auditable, not a black box — but the software is not open source and may not be self-hosted free or redistributed.
For regulated workloads above ~50 servers, fleet-wide air-gapped deployments, or co-engineered custom detection rules, the standard ladder does not fit. We do a custom annual contract priced to the workload. Write to [email protected].
The fastest way to know if oknek is the right call is to install it. We will catch whatever the agents on your boxes are doing that's out of bounds — or you walk away with zero charges and an audit log of what we saw.
