Pricing
Watch is free. Defend is by request.
A license names one estate and is checked offline. It does not count accounts, clusters, findings or seats.
Read-only
Watch
Free license365 days, renewable
For an estate you want watched. Warden finds and works the case; it changes nothing.
- A focused read every 15 minutes, a full read every hour, and the event lane on every write call.
- Four agents on Bedrock in your account: triage, investigate, hunt and harden.
- Cases with a timeline, the attacker's identities and what they can reach.
- Swarm detection and attribution of the attacker's means.
- The console: Now, needs you, handled by Warden, vulnerabilities, costs, and the chat.
- Mail and Slack notices that point to the console.
- The Footprint page and the guided uninstall.
During early access, accounts open by invite: request early access and we will send you one.
Watch, plus response
Defend
Not issued yetA paid plan, 365 days
For an estate you want defended. One passkey signature ends the attack.
Defend ships in every release. We are not issuing Defend licenses yet: request access and we will contact you.
- Everything in Watch.
- A response plan for each attack, prepared before you open the case.
- Contain every attacker identity: fence sessions, disable keys, quarantine principals, isolate instances.
- Close the path they used.
- Every step dry-run first, time-boxed and undoable.
- Sign once with your passkey, on the case page or in the chat.
- A follow clause that keeps containing what a swarm creates next.
What AWS bills you
Warden runs in your own AWS account, so AWS bills you for what it creates there: the interface endpoints, the node group, the console's edge, KMS keys, and the Bedrock tokens the agents use under a hard daily ceiling. A license does not change that bill, and none of it reaches us.
Setup prints a dollar line for each item before it creates anything, and the console's Footprint page keeps the same figures. See what it costs to run and what the agents cost.
How licenses work
- One license per estate. An estate is the AWS accounts and EKS clusters one hub watches: a single account, or an organization's accounts.
- Checked offline. A license is a signed file. Warden verifies it when it starts and never phones home.
- The watch never stops. When a license expires, changes and Defend stop until you renew; Warden keeps watching.
- The plan is written into the file. A Watch license says
watch. A Defend license issued during the early access preview saysdefend-earlyand keeps Defend on until its own expiry.
Get early access
Warden is in an early access preview. Access arrives by e-mail.
Thank you. You are on the early access list.
We email the address you gave once, to confirm the request. Requests are approved by hand, and an approved one gets an invite link by email. No marketing is sent. To be taken off the list, write to support@wardensec.ai.