Plans & Pricing
Clawkeeper has four seat tiers plus cloud hosts sold as an infrastructure add-on. The CLI scanner is free and unlimited — dashboard tiers add fleet monitoring, intelligence features, and team management. Cloud hosts are billed separately from seat pricing.
Plan comparison
| Feature | Free | Pro | Team | Enterprise |
|---|---|---|---|---|
| Price (monthly) | $0 | $19/mo | $29/seat/mo | Custom |
| Price (annual) | $0 | $15/mo ($180/yr) | $23/seat/mo ($276/yr) | Custom |
| Seat minimum | — | 1 | 3 | Custom |
| CLI scanner | 55 checks | 55 checks | 55 checks | 55 checks |
| Auto-fix remediation | Yes | Yes | Yes | Yes |
| Letter grade + score | Yes | Yes | Yes | Yes |
| Claude Code workstations | 1 | 3 | Unlimited | Unlimited |
| Connected repos | 1 | 3 | Unlimited | Unlimited |
| Connected GitHub repos | 1 | 3 | Unlimited | Unlimited |
| API keys | 1 | 3 | Unlimited | Unlimited |
| Runtime Shield | Yes | Unlimited | Unlimited | Unlimited |
| Scan history | 7 days | 90 days | Unlimited | Unlimited |
| Cloud hosts | — | Add-on | Add-on | Volume pricing |
| CVE vulnerability audit | — | Yes | Yes | Yes |
| AI-powered insights | — | Yes | Yes | Yes |
| Score trend charts | — | Yes | Yes | Yes |
| Email alerts | — | Yes | Yes | Yes |
| Webhook alerts | — | — | Yes | Yes |
| Skill Marketplace | — | Yes | Yes | Yes |
| Activity stream | Last 25 events | Full history | Full history | Full history |
| Team members | — | — | Unlimited | Unlimited |
| Role-based access (RBAC) | — | — | Yes | Yes |
| Org-wide policies | — | — | Yes | Yes |
| Identity provider sync | — | — | Yes | Yes |
| Group-based policies | — | — | Yes | Yes |
| MCP skill monitoring | Yes | Yes | Yes | Yes |
| MCP skill policies | Yes | Yes | Yes | Yes |
| Multiplayer (shared fleet) | — | — | Yes | Yes |
| Volume pricing on cloud hosts | — | — | — | Yes |
| SSO / SAML | — | — | — | Yes |
| Dedicated support & SLA | — | — | — | Yes |
| NET-30 invoicing | — | — | — | Yes |
Free
The free tier gives you everything you need for personal use or evaluating Clawkeeper:
- 1 Claude Code workstation
- 1 connected repo, 1 API key
- Runtime Shield (all tool calls evaluated)
- 1 connected GitHub repo
- MCP skill monitoring
- Full 55-check CLI scanner with auto-fix
- 7-day scan history retention
- Letter grade and score on every scan
- Community support
The CLI scanner runs locally with zero dependencies and zero limitations. You can scan as many machines as you want — the dashboard is for centralized fleet monitoring.
Pro — $19/month
Pro is designed for individual developers who want continuous monitoring and security intelligence. Single seat. Everything in Free, plus:
- 3 Claude Code workstations
- 3 connected repos, 3 API keys
- 3 connected GitHub repos
- MCP skill policies (blocked, allowed, warn-only)
- 90 days scan history retention
- Unlimited Runtime Shield events
- Live CVE vulnerability audit — live feed cross-referenced against your installations
- AI-powered insights — automated analysis surfacing critical failures, credential exposure, regressions, fleet drift, stale hosts, and quick wins
- Score trend charts — visualize security posture changes over time
- Email alerts — get notified on CVEs, critical findings, grade drops, and new hosts
- Skill Marketplace — browse, search, and install from ClawHub's 13,000+ community skills with security badges
- Cloud Deploy — provision managed OpenClaw instances (cloud hosts sold separately)
- Console — browser-based terminal to cloud instances via Tailscale mesh
- Full activity stream — complete history of scans, grade changes, and check flips
- Standard support
Annual billing: $15/month ($180/year) — save 20%.
Cloud hosts are sold separately (see Cloud Hosts below).
Team — $29/seat/month (min 3 seats)
Team is for organizations that need RBAC, org policies, and multiplayer fleet management. Minimum 3 seats ($87/mo floor). Everything in Pro, plus:
- Unlimited workstations & repos
- Unlimited connected GitHub repos
- Identity provider sync (Entra ID, Google Workspace, Okta)
- Group-based policy overrides
- Auto-deprovisioning when users are disabled in IdP
- Unlimited scan history retention
- Unlimited API keys
- Invite team members (Admin, Developer, Member roles)
- Org-wide policies (force shield, allowed models, quotas)
- Centralized provider API keys (Anthropic, OpenAI, Google)
- Email & webhook alerts
- Multiplayer — shared fleet visibility
- Priority support
Annual billing: $23/seat/month ($276/seat/year) — save 20% vs monthly.
Cloud hosts are sold separately (see Cloud Hosts below).
Enterprise
For organizations running at scale. Everything in Team, plus:
- Unlimited everything
- Volume pricing on cloud hosts
- SSO / SAML integration
- Dedicated support and SLA
- NET-30 invoicing
- Custom compliance reports
Cloud Hosts
Cloud hosts are managed infrastructure that runs the OpenClaw gateway and Clawkeeper Runtime Shield on your behalf. Cloud hosts are sold as an add-on — not bundled in any seat tier. Billed monthly per host. Stop anytime.
Three tiers
| Size | vCPUs | RAM | Storage | Price | Use Case |
|---|---|---|---|---|---|
| Small | 1 | 2 GB | 50 GB | $20/mo | Single-agent setups, dev/test, light workloads |
| Medium | 1 | 4 GB | 80 GB | $40/mo | Production agents with OpenClaw + Runtime Shield |
| Large | 2 | 8 GB | 160 GB | $80/mo | Heavy workloads, multi-agent fleets |
Every cloud host includes:
- OpenClaw gateway pre-installed and configured
- Clawkeeper Runtime Shield enabled
- Dedicated console URL at
*.console.clawkeeper.dev - Tailscale mesh for secure access
- Automatic updates and monitoring
- 24/7 uptime monitoring
Example bills
- Solo dev, monitoring only: Pro $19/mo = $19/mo
- Solo dev, 1 Small host: Pro $19 + $20 = $39/mo
- Solo dev, 1 Medium host: Pro $19 + $40 = $59/mo
- Team of 5, 3 Medium hosts: 5×$29 + 3×$40 = $265/mo
- Team of 10, 5 Large hosts: 10×$29 + 5×$80 = $690/mo
Enterprise plans qualify for volume pricing on cloud hosts (discounted rates at 20+ hosts). Contact sales for details.
FAQ
Does the CLI scanner require a paid plan?
No. The CLI scanner is free and unlimited. You can run all 55 checks, use auto-fix, and generate local reports without an account.
What happens when I hit the workstation limit?
The agent will still run scans locally, but new workstations won't appear on the dashboard. Upgrade your plan to add more — Pro supports 3, Team is unlimited.
What's the difference between email and webhook alerts?
Email alerts are available on Pro and above. Webhook alerts (for Slack, PagerDuty, custom endpoints) require a Team or Enterprise plan.
How does per-seat billing work for Team?
Team is $29/seat/month (or $23/seat billed annually) with a minimum of 3 seats. The floor is $87/month. You can add or remove seats anytime from the billing portal. Changes are prorated.
How do cloud hosts work?
Cloud hosts are separate from seat pricing. You pay per host per month — $20 for Small, $40 for Medium, $80 for Large. Hosts include the OpenClaw gateway, Runtime Shield, and console access. There are no credits or bundled hosts in any plan tier — every host is an add-on billed monthly. Stopped hosts are not billed. Enterprise plans qualify for volume pricing.
Can I switch between Pro and Team?
Yes. Use the Stripe billing portal in Settings to switch plans. Changes take effect immediately with prorated billing.
Can I cancel anytime?
Yes. Manage your subscription through the billing portal in Settings. Your account reverts to the free tier at the end of the billing period.
What is MCP skill monitoring?
Clawkeeper tracks which MCP (Model Context Protocol) tools your developers invoke during Claude Code sessions. You can block specific MCP servers, restrict to an allowlist, or set warn-only mode. MCP monitoring works on all plans. See MCP Skill Monitoring for details.
What identity providers are supported?
Team and Enterprise plans can connect Microsoft Entra ID (Azure AD), Google Workspace, or Okta to sync your team directory. This enriches workstation data with developer names and departments, and enables group-based policy overrides. See Identity Providers for setup details.