pricing-matrix
Plans
| Developer | Pro | Business | |
|---|---|---|---|
| Price / month | $0 | $49 | $449 |
| MAU | 10,000 (hard cap) | 25,000 · then $0.02 each | 100,000 · then $0.015 to 500,000, $0.01 beyond |
| Connections | 1 | 1 · then $75 each | 10 · then $60 to 50, $45 beyond |
| Organizations | 10 | 100 · then $1 each | 1,000 · then $0.5 each |
| Registered agents | 10 | Unlimited | Unlimited |
| Active agents | 10 | 100 · then $0.05 each | 2,500 · then $0.03 each |
| M2M tokens | 1,000 | 10,000 · then $0.0025 each | 100,000 · then $0.002 to 1,000,000, $0.0015 beyond |
| Ask API calls | 1,000 | 10,000 | 100,000 |
| MCP servers | 1 | 5 | Unlimited |
| Custom domains | 0 | 1 | 3 |
| Audit retention days | 3 | 30 | 90 |
| Log streams | 0 | 0 | 1 |
| Admin seats | 2 | 5 | 15 |
| Sandboxes | 0 | 0 | 0 |
| Webhook event types | 5 | Unlimited | Unlimited |
Features
| Feature | Developer | Pro | Business |
|---|---|---|---|
aauth | ✓ | ✓ | ✓ |
abac | — | add-on: Fine-grained authorization | add-on: Fine-grained authorization |
admin_sso | — | — | ✓ |
agent_anomaly | — | — | add-on: Threat Detection |
agent_budgets | — | add-on: Agent Governance | ✓ (Agent Governance) |
agent_kill_switch | ✓ | ✓ | ✓ |
agent_registries | — | add-on: Agent Governance | ✓ (Agent Governance) |
agent_registry | ✓ | ✓ | ✓ |
agent_risk_score | add-on: Fraud Shield | add-on: Fraud Shield | add-on: Fraud Shield |
agent_trace_integrations | — | add-on: Agent Governance | ✓ (Agent Governance) |
ai_risk_synthesis | add-on: Fraud Shield | add-on: Fraud Shield | add-on: Fraud Shield |
ai_theme | — | ✓ | ✓ |
alert_channels | add-on: Fraud Shield | add-on: Fraud Shield | ✓ |
analytics_export | — | ✓ | ✓ |
approval_channels | — | add-on: Agent Governance | ✓ (Agent Governance) |
ask_api | ✓ | ✓ | ✓ |
asn_anomaly | add-on: Fraud Shield | add-on: Fraud Shield | add-on: Fraud Shield |
attack_protection_basic | ✓ | ✓ | ✓ |
attacker_network | — | — | add-on: Threat Detection |
audit_export | — | ✓ | ✓ |
audit_retention_1y | — | add-on: Audit & Compliance | add-on: Audit & Compliance |
b2b_portal | — | add-on: B2B self-service portal | ✓ (B2B self-service portal) |
badge_removal | — | ✓ | ✓ |
breached_password | ✓ | ✓ | ✓ |
byok_keys | — | — | add-on: Bring-your-own signing keys |
caep_dashboard | — | add-on: Agent Governance | ✓ (Agent Governance) |
captcha | ✓ | ✓ | ✓ |
ciba | — | — | ✓ |
cimd | ✓ | ✓ | ✓ |
core_auth | ✓ | ✓ | ✓ |
crm_sync | — | ✓ | ✓ |
custom_css | — | ✓ | ✓ |
custom_domains | — | ✓ | ✓ |
custom_password_policy | — | ✓ | ✓ |
customer_360 | — | ✓ | ✓ |
delegation_chains | — | add-on: Agent Governance | ✓ (Agent Governance) |
dev_sandboxes | — | — | add-on: Developer sandboxes |
device_fingerprinting | add-on: Fraud Shield | add-on: Fraud Shield | add-on: Fraud Shield |
device_posture | — | — | ✓ |
dpop | — | ✓ | ✓ |
email_templates | — | ✓ | ✓ |
failed_login_detection | ✓ | ✓ | ✓ |
fapi | — | — | ✓ |
fraud_shield | add-on: Fraud Shield | add-on: Fraud Shield | add-on: Fraud Shield |
gdpr_basic | ✓ | ✓ | ✓ |
gdpr_full | — | add-on: Audit & Compliance | ✓ |
geo_velocity | add-on: Fraud Shield | add-on: Fraud Shield | add-on: Fraud Shield |
groups | ✓ | ✓ | ✓ |
hris_sync | — | — | ✓ |
ip_reputation | add-on: Fraud Shield | add-on: Fraud Shield | add-on: Fraud Shield |
jit_permissions | — | add-on: Agent Governance | ✓ (Agent Governance) |
ldap | — | — | ✓ |
login_velocity | ✓ | ✓ | ✓ |
managed_ip_intel | add-on: Fraud Shield | add-on: Fraud Shield | add-on: Fraud Shield |
mcp_auth | ✓ | ✓ | ✓ |
mfa | ✓ | ✓ | ✓ |
mtls_bound_tokens | — | — | ✓ |
new_country | add-on: Fraud Shield | add-on: Fraud Shield | add-on: Fraud Shield |
passkeys | ✓ | ✓ | ✓ |
progressive_profiling | — | ✓ | ✓ |
push_auth | — | ✓ | ✓ |
rbac | ✓ | ✓ | ✓ |
risk_dashboard | add-on: Fraud Shield | add-on: Fraud Shield | add-on: Fraud Shield |
risk_policy_tuning | add-on: Fraud Shield | add-on: Fraud Shield | add-on: Fraud Shield |
saml_idp | — | add-on: SAML identity provider | ✓ (SAML identity provider) |
scim_outbound | — | — | ✓ |
session_anomaly | — | — | add-on: Threat Detection |
siem_export | — | add-on: Audit & Compliance | ✓ |
sla_999 | — | — | ✓ |
sms_otp | ✓ | ✓ | ✓ |
social_login | ✓ | ✓ | ✓ |
ssf_caep | — | — | ✓ |
tenant_admin_api | — | ✓ | ✓ |
threat_ai_summary | — | — | add-on: Threat Detection |
threat_responses | — | — | add-on: Threat Detection |
threat_rules | — | — | add-on: Threat Detection |
token_replay | — | — | add-on: Threat Detection |
token_vault | — | add-on: Agent Governance | ✓ (Agent Governance) |
uba | add-on: Fraud Shield | add-on: Fraud Shield | add-on: Fraud Shield |
webhooks | ✓ | ✓ | ✓ |
workload_attestation | — | add-on: Workload identity | ✓ (Workload identity) |
zanzibar | — | add-on: Fine-grained authorization | add-on: Fine-grained authorization |
Add-ons
| Add-on | Price / month | Available on | Included in |
|---|---|---|---|
| Fraud Shield — Full adaptive-auth signals, tunable risk policy and LumoAuth's managed IP reputation. | $49 + usage | Developer, Pro, Business | — |
| Agent Governance — JIT permissions with human approval, token vault, delegation chains and agent budgets. | $149 | Pro | Business |
| Audit & Compliance — One-year audit retention, a log stream and the full GDPR suite. | $99 | Pro, Business | — |
| Fine-grained authorization — Attribute-based policies (ABAC) and relationship-based access control (Zanzibar ReBAC). | $99 | Pro, Business | — |
| B2B self-service portal — Let your customers' admins manage their own members, roles and invitations at /b2b. | $99 | Pro | Business |
| Workload identity — Secretless agents — attest from AWS, GCP, Azure, Kubernetes, SPIFFE and CI/CD platforms. GitHub Actions stays free. | $99 | Pro | Business |
| SAML identity provider — Sign users into SAML-only apps such as Salesforce, Box and Slack with LumoAuth as the IdP. | $99 | Pro | Business |
| Threat Detection — Campaign detection, automated responses, attacker network and agent anomaly detection. | $199 | Business | — |
| Bring-your-own signing keys — Sign tokens with keys held in your KMS or HSM. | $299 | Business | — |
| Developer sandboxes — Spawn throwaway sandbox organizations for branch previews, PR environments and CI from the CLI or the Admin API. | $199 | Business | — |
| Additional MAU — Prepaid MAU at $0.012 → $0.008 each instead of $0.015 overage. | $300 → $200/mo per block of 25,000 monthly active users (volume pricing) | Business | — |
| Additional active agents — Prepaid agents at $0.025 → $0.016 each instead of $0.03 overage. | $25 → $16/mo per block of 1,000 monthly active agents (volume pricing) | Business | — |
| Additional M2M tokens — Prepaid tokens at $0.0016 → $0.0010 each instead of $0.002 overage. | $160 → $100/mo per block of 100,000 machine-to-machine tokens (volume pricing) | Business | — |
| Additional log stream — | $99 each | Pro, Business | — |
| Additional custom domain — | $20 each | Pro, Business | — |