Govern every agent. Never count seats.
Priced per governed request — not seats. Open core with free Kimss Forge; connect the gateway when production needs governance.
Essential governance
Production
100,000 governed requests included. Start with 14 days of full Production — no card.
- Full Production control plane
- 100,000 governed requests included
- $16 / 100k requests overage
- 30-day telemetry retention
- Threat Intercepts — blocked-traffic dashboard
- Alerts & Webhooks — outbound NOC / SIEM notifications
- Authority Boundary — sensitive args need trusted human provenance
- Tool argument policies — constrain what values agents may pass to tools
- Tool-loop guardrails — pin tool schemas, shield tool results from indirect prompt injection
- Delegation governance — depth ceiling and one token envelope per multi-agent run
- Usage dashboard and agent Tracking
- Team & Access — unlimited workspace members
- Entra SSO and domain routing
1,000,000 governed requests included
- Everything in Production, plus
- 1,000,000 governed requests included
- $8 / 100k requests overage
- 90-day telemetry retention
- Threat Intercepts + JSON/CSV export + live webhooks
- Human approvals for irreversible tools (exact-call, one-shot)
- Branch quarantine — isolate one sub-agent branch of a run; siblings keep working
- SCIM 2.0 (Scale and Enterprise)
- Audit and CSV exports
Negotiated volume, SIEM export, SCIM, and invoice billing.
- Everything in Scale, plus
- Custom volume (typically >2M requests)
- Custom or unlimited retention
- Threat Intercepts with custom retention
- SCIM 2.0 (Scale and Enterprise), Alerts & Webhooks
How pricing works
Open core: build with free Kimss Forge (kimss-forge) — any model, no account. Connect the Kimss gateway when production needs governance. Inference on your vaulted endpoints remains your provider bill.
- What a governed request is
- A register, report, or gateway-routed call the control plane governs. Included volumes are listed on each plan above.
- What it is not
- Your provider’s model-token invoice, metering by workspace seat on paid tiers, or an unpublished quote for Production / Scale. Enterprise is custom for regulated deployments.
Guardrails block unsafe traffic — but without Threat Intercepts you cannot prove what was stopped. Production and above retain a searchable log of every block (agent, trigger, sanitized excerpt) for security review and SIEM handoff.