Pricing
Priced per endpoint. Tracers included.
Every plan includes both mechanisms — discovery scanning and tracer documents — because early warning shouldn't be an add-on.
Pilot
Free
during early access
For proving value on a real fleet segment.
- Up to 25 endpoints
- Unlimited discovery scans
- 50 active tracer documents
- Dashboard alerts and notifications
- Community support
Most teams start here
Growth
$6
per endpoint / month · early-access pricing
For running a real detection program.
- Up to 500 endpoints
- Everything in Pilot, plus:
- Unlimited tracers and custom patterns
- Outbound webhooks → your SIEM/SOAR
- Role-based access and Google SSO
- Priority support
Billing opens with general availability, handled by Stripe. Reserving adds you to the waitlist at this price.
Enterprise
Custom
annual, by agreement
For fleets and requirements that need a conversation.
- Unlimited endpoints
- Everything in Growth, plus:
- Deployment and rollout assistance
- Security-review support for your assessment
- Roadmap input — cloud connectors, SAML/SCIM
- Invoicing and procurement-friendly terms
Fair questions
Asked before you had to.
- Does Kiken block exfiltration?
- No — and we won't pretend otherwise. Kiken detects and alerts, then routes the signal into the response workflow you already run. It complements DLP and CASB; it doesn't replace them.
- Do tracers really work outside our network?
- Yes — that's the point. A tracer fires when the document is opened online, from any machine, managed or not. You get IP, User-Agent, and timestamp.
- What about files in SharePoint, Box, or OneDrive?
- Covered today when they sync to a managed device. Native cloud connectors are on the roadmap — and clearly labeled as such.
- How does billing work?
- Growth is a monthly per-endpoint subscription billed through Stripe — card payment, self-serve, cancel anytime. Enterprise is annual with invoicing.
- Where does our data live?
- Kiken is self-hosted in your cloud account. Findings and evidence stay in your infrastructure, with evidence images in private storage behind short-lived links.