Pricing

Four tiers. Sales-led above Team.

Vertirite is priced for the buyer who has to defend the budget line. Open Source is genuinely free and self-hostable. Team is self-serve. Business and Enterprise are sales-led because the install conversation deserves a human on both ends.

Open Source

Tinkerers, OSS contributors, internal validators

Freeself-host

The broker, the agent daemon, and the certificate authority. Self-host on your own infrastructure.

  • surge-agentd (system daemon)
  • surgexi-ca (cert authority)
  • Basic broker — single tenant, single fleet
  • Approval queue (CLI only)
  • Audit ledger (local SQLite)
  • BSL 1.1 license — see docs/LICENSE
  • Community support via GitHub issues
  • No SLA, no roadmap influence
View on GitHub
Team

Small managed-service providers, consultancies, regional accounting/legal shops

$500per month

Hosted broker, up to 10 protected systems. The smallest paid tier — for shops just starting their AI governance posture.

  • Everything in Open Source
  • Hosted broker (SurgeXi-managed) OR self-host
  • Up to 10 protected systems
  • 30-day audit retention
  • Email support, 48-hour response
  • SSO-ready (Google, Microsoft, Okta)
  • Single tenant
  • Self-serve onboarding (no sales call required)
Start pilot
Business

Mid-market regional businesses — community banks, regional clinics, mid-market law firms, family offices

$2,500per month

Multi-fleet, full audit retention, monthly compliance reports. Sales-led — every Business customer starts with a pilot.

  • Everything in Team
  • Multi-fleet — unlimited protected systems
  • Full audit retention (no rolling window)
  • Approval workflows + webhook integrations (Slack, Teams, ServiceNow, PagerDuty)
  • Monthly compliance reports (PDF, signed)
  • 24-hour response, business-hours phone
  • Quarterly business review with assigned SE
  • Tenant isolation per-row, audited
Request pilot
Enterprise

Hospitals, banks, insurers, municipal and state government, federal subcontractors

$80K – $200Kper year

Self-host or dedicated tenant. SOC2/HIPAA/FedRAMP reporting. Dedicated SE. Custom capability registries. BAA available.

  • Everything in Business
  • Self-host or dedicated SurgeXi tenant
  • SOC2 Type 2 attestation (in-flight; letter available immediately)
  • HIPAA assessment posture, BAA available
  • FedRAMP Moderate target 2027
  • Custom capability registries developed jointly
  • Customer KMS (AWS KMS, Azure Key Vault, GCP CMEK)
  • Dedicated Solutions Engineer
  • Custom contract terms, security questionnaire support
Contact sales
Pilot

The $5,000 60-day pilot.

Every paid Vertirite engagement begins with a pilot. We do not sell to operators who have not seen the audit trail. Pilot price is held flat across all paid tiers and is credited in full toward the annual contract on conversion.

What is included

  • One protected system
  • 60 days of operation in your environment
  • Defined success criteria, written before kickoff
  • Theatre demo against your vertical
  • Dedicated SE for the duration
  • Signed audit reports at days 14, 30, 60
  • Fee fully credited toward annual contract on conversion

The six-week sales cycle

  1. Week 1 — discovery call, vertical-specific Theatre demo
  2. Week 2 — written pilot proposal with success criteria
  3. Week 3 — security review, contract, NDA
  4. Week 4 — install on one protected system, operator training
  5. Weeks 5–8 — supervised operation, weekly check-ins
  6. Week 9 — outcome review, conversion to annual contract
Email [email protected]Read the SE runbook
Procurement

For your security review.

Security posture

Full posture matrix in our security disclosure. mTLS + ES256 JWT, append-only audit ledger with chain signatures, per-row tenant isolation enforced in CI.

View security

Compliance

SOC2 Type 2 in-flight (Drata onboarded). HIPAA assessment Q3 2026. BAA available on Enterprise. In-flight letter available for procurement immediately.

SOC2 in-flight

License

Broker source ships under BSL 1.1 — free for non-commercial and limited commercial use. Auto-converts to Apache 2 four years after each release.

Read LICENSE