Pricing

A plan for every scale

The SSH client is always free and open source.
Plans meter usage of the Shell API — the private engine that emulates every session.

Free
€0 / forever
To explore the project. No credit card, no expiry.
10.000 commands/month
200 sessions/month
7 days of retention
Start for free
Starter
€19 / month
For small teams that need basic per-IP intelligence.
100.000 commands/month
2.000 sessions/month
90 days of retention
animated attack map
Contact us
Most popular
Pro
€79 / month
For security teams with real traffic that need complete intelligence.
1.000.000 commands/month
20.000 sessions/month
365 days of retention
real-time attack map
Contact us
Enterprise
€499+ / month
No usage limits. For critical deployments. Dedicated instance on demand (in preparation).
Unlimited commands
Unlimited sessions
Custom retention
Talk to sales
Card payment coming soon. In the meantime, write to us to activate your plan.

Full comparison

Every capability, plan by plan.

Capability Free Starter Pro Enterprise
SSH honeypot
Open source SSH client (MIT) ✓ ✓ ✓ ✓
Debian 12 emulation — 100+ commands ✓ ✓ ✓ ✓
Per-session VFS (full isolation) ✓ ✓ ✓ ✓
Pipelines, REPLs, editors (nano/vim) ✓ ✓ ✓ ✓
JSON Lines logs (sessions, credentials) ✓ ✓ ✓ ✓
Credential capture window ✓ ✓ ✓ ✓
Commands/month 10.000 100.000 1.000.000 Unlimited
Sessions/month 200 2.000 20.000 Unlimited
Log retention 7 days 90 days 365 days Custom
Threat intelligence
Per-IP analysis of your sessions Starter+ ✓ ✓ ✓
Consolidated intelligence report Starter+ ✓ ✓ ✓
IOC export via API (threat feed) Pro+ Pro+ ✓ ✓
Infrastructure
Shared multi-tenant Shell API ✓ ✓ ✓ —
Dedicated, isolated instance (on demand) ✗ ✗ ✗ In preparation
Priority support ✗ ✗ Email Dedicated channel

Frequently asked questions

What counts as a "command"?
Every line the attacker sends to the honeypot — whether ls, wget http://... or cat /etc/passwd — consumes one command from your monthly quota. The quota resets on the 1st of each month.
Does the emulation engine reach the client?
No. The emulation engine is a private CipherSentry cloud service. The open source client (MIT) connects to it via API. No tier includes direct access to the engine or its source code.
Can I change plans at any time?
Yes. Just write to us and we'll switch your plan; it takes effect on your next cycle. Automatic card billing is coming soon.
Where is the data stored?
All data is processed and stored on servers within the European Union, in compliance with GDPR.
Is there an on-premise option?
We don't offer on-premise deployment. The emulation engine is a cloud service. For Enterprise, the dedicated, isolated instance is in preparation (on demand); write to us if you need it.