Simple per-asset pricing.
One rate per asset, per month — the whole closed loop included. Billed monthly, with annual contracts available and channel pricing through our partner NebulaCG.
The more of the estate you protect, the lower the rate.
Standard
Get to closed-loop on a defined estate. Detect, plan, remediate, verify, and prove.
- Up to 200 assets
- Full detect → plan → remediate → verify → prove loop
- Manual approval on every change (human-in-the-loop)
- CIS / NIST 800-53 / ISO 27001 / SOC 2 control mapping
Professional
Autonomy and reversion monitoring for growing hybrid estates.
- Up to 2,000 assets
- Autonomous planning — opt-in, per asset group
- Reversion monitoring + safe rollback
- Everything in Standard
Enterprise
Full hybrid production, full autonomy configuration, and isolation options.
- Up to 25,000 assets
- Full asset-group autonomy + auto-fire control
- Dedicated / single-tenant isolation options
- Priority support + executive reporting
Mission-Grade tier (air-gapped / FedRAMP-aligned) — coming Q3 2026.
Self-serve on AWS Marketplace
Usage-based pricing for smaller teams — subscribe and deploy directly from AWS Marketplace, billed through your existing AWS account.
Buy Kanonika through NebulaCG
NebulaCG is our value-added reseller. Channel pricing, procurement and deployment support all run through them — so you can buy Kanonika on paper you already have in place, with a partner who knows the platform.
NebulaCGValue-added resellerEven semi-automated patching costs about $128 per finding
See how the math works out against manual and semi-automated remediation.
Ready to close the loop?
We'll scope a pilot on a defined slice of your estate.