Modern and Transparent Pricing
Three tiers, by capability: Community works the threat landscape on your own, Team brings your whole team into it under a commercial license, Enterprise brings in your environment and runs inside your boundary.
Every tier includes the Mallory Agent and scheduled agents. Team is priced per seat, and seats are the only thing we count. Tokens, workspaces, and agent runs aren't metered, so spinning up a workspace or running another agent never changes your bill.
Agents run on your own model provider key at every tier. We don't meter, mark up, or resell tokens. Nobody makes margin on your inference.
Track the landscape
Community
You follow threats and need to stay ahead of them, on your own account.
Personal use for one user
Free · available by request · bring your own model provider key
- Users / workspaces1 / 1
- Mallory Agent✓
- Scheduled agents✓
- Intel graph✓
- Asset graph—
- Model keyYours (BYOK)
- DeploymentHosted
- LicensePersonal · non-commercial
- Search the full Mallory Threat Graph: stories, actors, CVEs, IoCs
- Scheduled agents on the intel graph: monitors and briefs that run while you're away
- Intelligence API + MCP, rate-limited
Work it together
Team
You run a security function, and more than one person needs to work the same intelligence under a commercial license.
Five users included. Add seats as your team grows.
No card · runs on your model provider key
- Users / workspacesPer seat · shared
- Mallory Agent✓
- Scheduled agents✓
- Intel graph✓
- Asset graph—
- Model keyYours (BYOK)
- DeploymentHosted
- LicenseCommercial
Everything in Community, for your whole team, plus:
- Shared workspaces: cases, findings, and context across the team
- Scheduled agents for the team: monitors, briefs, and investigations on the intel graph
- Intelligence API + MCP, production grade
- Bring your own intel feeds and ticketing integrations
- SSO login (OIDC) + user management
- Runs on your own model provider key, with no markup on tokens
- Licensed for commercial use
Inside your boundary
Enterprise & MSSP
You need Mallory to know your environment as well as the threat landscape, have compliance obligations, need the platform inside your own boundary, or deliver intelligence to your own clients.
Fixed annual contract, scoped to your requirements
Commercial + redistribution / MSSP addenda
- Users / workspacesUnlimited
- Mallory Agent✓
- Scheduled agents✓
- Intel graph✓
- Asset graph✓ · No ceiling
- Model keyYours · BYOM
- DeploymentSelf-host · BYO cloud
- LicenseCommercial + MSSP
Everything in Team, plus:
- Your estate: the asset graph, with direct querying of code, compute, cloud, and identity, no coverage ceiling
- Agents on your environment: investigations, monitors, and briefs that know what you run and what's exposed
- Asset-source integrations and custom intel sources
- BYO everything: your key, your models, your cloud, self-host
- Compliance & governance: enforced SSO/SAML, SCIM, custom RBAC, audit export, data residency
- Multi-tenant MSSP/MDR operation
- Bulk API, streaming, and data licensing
- Dedicated CSM, named SLA
Your plan price is your whole Mallory bill
We never meter, mark up, or resell tokens. There's no usage line on a Mallory invoice at any tier.
Community
Bring your own key (required). Your provider bills you directly for what you use. Your Mallory bill is $0.
Team
Bring your own key. Your provider bills you directly, and there's nothing on your Mallory invoice beyond the plan price.
Enterprise & MSSP
Your key, your models, or your cloud. Inference runs entirely under your own provider agreements.
Compare Plans
Every plan runs on the full Mallory intelligence graph. Pick the one shaped like your job.
| Feature | Community | Team | Enterprise & MSSP |
|---|---|---|---|
| Mallory Agent | ✓ | ✓ | ✓ |
| Scheduled agents | ✓ | ✓ | ✓ + your environment |
| Intel graph | ✓ | ✓ | ✓ |
| Asset graph | — | — | ✓ No ceiling |
| Your estate: connect & query | — | — | ✓ No ceiling |
| Users & workspaces | 1 · 1 | Per seat · shared workspaces | Unlimited |
| API + MCP | Intel, rate-limited | Production | Unlimited + bulk |
| Bring your own intel feeds | — | ✓ | ✓ + custom sources |
| SSO | — | Login (OIDC) | Enforced · SAML · SCIM |
| Deployment | Hosted | Hosted | Hosted · self-host · BYO cloud |
| Model provider key | Required (BYOK) | Required (BYOK) | Your key or your own models |
| MSSP / multi-tenant | — | — | ✓ |
| License | Personal use for one user | Commercial internal | + Redistribution / MSSP |
Questions, Answered
See your threat landscape through Mallory
Start free, trial the full team experience, or talk to us about your program.