One annual license covers one production deployment — every agent, model and provider behind it, and as many gateway replicas as you need to run it safely. Not per seat, not per model, not per call.
The detection engine, free forever. Wrap your executor with guard() or
run the HTTP gateway. LangChain, Vercel AI SDK, and OpenAI Agents adapters included.
guard() SDK + HTTP gateway1 production environment
Everything in Open Core, plus the durable ledger, containment, and audit surfaces — all running inside your own VPC. Data never leaves your infrastructure.
Up to 3 production environments
For teams running Cerberus in more than one production environment — separate regions, business units, or a segregated regulated workload.
4+ environments or air-gapped
Larger fleets, air-gapped deployments, custom SLAs, security questionnaires and MSAs.
Prices in USD, billed annually. Setup support is included with every license. Marketplace procurement via Google Cloud & Azure is on the roadmap. Questions before you buy? [email protected] — we reply within one business day.
One deployment of the Cerberus gateway serving production traffic — typically one VPC, one region, one business unit. Run as many replicas behind your load balancer as you need for resilience; that is one environment, not several. Staging and development deployments are included at no charge.
None of those. One gateway protects however many agents, models and providers you point at it — OpenAI, Anthropic, Google, local models, or all of them at once. You should not pay more for putting Cerberus in front of more of your estate.
A lapsed license takes the gateway out of your production path. Annual billing means that decision happens once a year with notice, not on a card expiry. Evaluate for free first — the MIT core has no time limit.
Yes. The MIT-licensed core is free: npm install @cerberus-ai/core. Run
the live demo and the in-repo proof path with no license required.
Nowhere. The Enterprise gateway is self-hosted in your own VPC. Cerberus never sees your traffic or data.
Your license key is emailed immediately. It authenticates the release download, the container image pull and the running gateway — no GitHub account or registry token needed.
Every license includes hands-on setup with our engineering team — from image pull to first blocked attack in your environment.