guardyn.dev
Pricing

Pay for what the models actually cost, plus a margin we publish.

One credit is one US cent of model value. Your plan includes a monthly allowance; if a month runs heavier, move up a plan. Endpoints and seats are counted, not metered.

Free

Two machines, real answers

$0a month
+100 welcome credits when you sign up

Enough to investigate a machine you own on the fast tier.

2 seats

  • 2 endpoints
  • 200 credits a month
  • Fast models
  • Full read-only tool set

Starter

For the person who owns the estate

$49a month
or $470 a year (about two months free)

A small fleet, the balanced models, and history that outlives the incident.

5 seats

  • 15 endpoints
  • 5,000 credits a month
  • Balanced models
  • 2 concurrent investigations
  • 2 API keys

Team

For a security function

Popular
$199a month
or $1,910 a year (about two months free)

Frontier models, real concurrency, exportable audit trail.

20 seats

  • 100 endpoints
  • 25,000 credits a month
  • Frontier models
  • 5 concurrent investigations
  • Audit-log export

Enterprise

For the whole estate

Talk to us

For a large estate: the highest limits, and terms agreed with you.

500 seats

  • 5,000 endpoints
  • 150,000 credits a month
  • Every enabled model tier
  • 20 concurrent investigations
  • 50 API keys
  • Audit-log export
What a credit buys

The arithmetic, in the open.

A credit is a cent of retail model value. Each model carries its own price and its own margin, both visible to whoever administers the platform.

Credits per million tokens

  • Claude Haiku 4.5FastAnthropic
    Input
    300 cr
    Output
    1,500 cr
    Available on
    Free and up
  • Claude Sonnet 5BalancedAnthropic
    Input
    600 cr
    Output
    3,000 cr
    Available on
    Starter and up
  • Claude Opus 5FrontierAnthropic
    Input
    1,500 cr
    Output
    7,500 cr
    Available on
    Team and up

Credits are charged at the provider's list price × 3; one credit is US$0.01.

A typical single-question investigation on the balanced tier — four or five tool calls and a couple of pages of answer — lands between 8 and 25 credits. A full compromise assessment on the frontier tier is usually 60 to 200. Prompt caching means follow-up questions in the same conversation cost a fraction of the first.

Questions

The things people ask before signing up.

What happens when I run out of credits?

Investigations stop with a message saying how many credits the next one needs. Nothing is deleted, nothing is throttled silently, and your agents stay connected. Move to a larger plan, or wait for next month’s allowance.

Do you train on my data?

No. Evidence from your machines is sent to the model provider you selected in order to answer your question, and nowhere else. Nothing is used to train anything.

Can the agent be used to attack my machines?

It has no tool that takes a command and no tool that changes anything. The tool set is compiled into the binary: this server can name a tool, never supply a command. Worst case, a compromised server can read from your fleet.

Which models can I use?

The table above lists every model that is live today. Your plan sets the highest tier you can choose.

Is there a minimum term?

No. You pay for a month or a year at a time through PayPal. Nothing renews automatically; three days after the paid time ends, the workspace moves to Free, and nothing is deleted.

Where does it run?

guardyn.dev is a hosted service. You install the agent on your machines; everything else runs on our infrastructure, so there is nothing for you to operate, patch or back up. The agent is read-only and outbound-only, which is what makes that acceptable — see the security model.