Every plan gets every guard.
Connect your agents and MCP servers to Clevername and every call is routed and scanned before it reaches the model. You pay your AI provider directly; Clevername never marks up LLM costs. Paid tiers buy more seats, more agents, longer retention, and SSO, not more security.
Bring your own OpenAI, Anthropic, or Gemini key. No credit card for Free.
Free
Connect and scan. For individuals.
- Connect any provider, unlimited requests
- CleverGuard Tiers 1–2 on every call, plus the Tier 3 beta
- 5 governed agents + gateway tokens
- MCP Gateway, unlimited installs
- Credential Vault
- 7-day audit retention
Pro
for individual power users
Everything in Free, plus:
- 25 governed agents, expandable in $10/mo packs of 5
- 30-day audit log retention
- 5 webhook endpoints
- Email support
Team
2-seat minimum, billed per seat
Everything in Pro, plus:
- Up to 25 seats and 25 governed agents, expandable in $10/mo packs of 5
- 365-day audit log retention
- SOC dashboard for CleverGuard monitoring
- Agent Review board with a multi-member council
- Org-wide policy controls + custom scanner rules
- Priority support
Enterprise
Built for security orgs.
- Unlimited seats, agents, and gateway tokens
- SSO + SCIM directory sync
- Cloud or self-hosted, same image
- SIEM log export (Splunk, Datadog, Sentinel)
- Tier 0 data-label enforcement (Purview, DLP, Macie)
- Dedicated support channel
Subscriptions renew monthly. Cancel anytime from your billing settings, with no cancellation fee. Downgrades take effect at the end of the billing period. Upgrades are prorated to the day. Unused time is not refunded.
All four guards are on every plan, routed through the MCP Gateway. The one scanner check that is plan-gated is Tier 0, the data-label check. It reads classification labels from a DLP integration such as Purview, Google DLP, or Macie, and that integration is Enterprise only. The Tier 3 deep scan runs on governed production traffic today, still in beta, on compute we operate ourselves and never on your key. If it is unavailable, the scanner says so rather than pretending it ran.
Your AI provider
OpenAI / Anthropic / Gemini billed by them, at their published rates
Clevername
Pro plan $29 / month markup on your LLM calls $0
- Your keyGoes straight into GCP Secret Manager. Never in our database.BYOK
- Our modelsThe Tier 3 judge and the ScopeGuard and ClaimGuard extractors run on Clevername’s own self-hosted compute.our cost
Your subscription covers the governance platform. Your inference bill stays with your provider.
What each plan gets you.
The full comparison, row by row. If you only read one group, read the first.
See what each guard catches| Feature | Free | Pro | Team | Enterprise |
|---|---|---|---|---|
| Traffic Security: scanned on every call | ||||
| CleverGuard scanning* | Tiers 1–2 + T3 beta | Tiers 1–2 + T3 beta | Tiers 1–2 + T3 beta + org custom rules | Tiers 0–2 + T3 beta + org custom rules |
| Credential interception + PII detection | ✓ included | ✓ included | ✓ included | ✓ + KMS BYOK |
| Audit log retention | 7 days | 30 days | 1 year | Custom |
| LLM Gateway (BYOK) | Unlimited | Unlimited | Unlimited | Unlimited |
| Personal access keys (IDE / scripts) | Unlimited | Unlimited | Unlimited | Unlimited |
| Agent Governance: governed agents only | ||||
| Governed agents + CNK tokens | 5 | 25 (+ packs) | 25 (+ packs) | Unlimited |
| Agent Review + guardrail profiles | ✓ self-approve | ✓ self-approve | ✓ + multi-member council | ✓ + bulk + SSO |
| Signed human approval for high-risk actions (via SignedApproval) | ✓ included | ✓ included | ✓ included | ✓ included |
| ScopeGuard (mandate enforcement) | ✓ included | ✓ included | ✓ + custom rules | ✓ + custom rules |
| ClaimGuard (hallucination checks) | ✓ included | ✓ included | ✓ + custom config | ✓ + custom config |
| DriftGuard (behavioral drift) | ✓ included | ✓ included | ✓ included | ✓ + SIEM forward |
| SSO + SCIM sync | — | — | — | ✓ included |
| Deployment | ||||
| Cloud (managed) | ✓ | ✓ | ✓ | ✓ |
| Self-hosted | — | — | — | ✓ same Docker image |
| Data used for training (unless you explicitly donate a time window from Privacy settings; donated content is stored readable by Clevername) | Never | Never | Never | Never |
| Org members | Just you | Just you | Up to 25 | Unlimited |
* Tiers 1–2 (pattern + ML) run on every call on every plan. Tier 0 (data-label enforcement) is Enterprise only. The Tier 3 deep scan is in beta and runs on our own compute.
Common questions
Mostly about BYOK: who pays whom, and what counts against your plan.
Start free and upgrade when you need seats.
Free for individuals with BYOK. Connect your provider keys and CleverGuard starts scanning every call. No credit card.