Pricing

Start free. Scale to DORA-ready.

Every tier uses the same H7 engine — full five-channel kernel detection, Ed25519 attestation, offline verification. Pricing differences reflect namespace scale and the compliance support envelope around the product.

Demo

Free· 14 days

5 agent namespaces

Evaluate H7 on your own machine — no commitment.

Full detection (all 5 channels)
Ed25519 .cal certificate signing
Offline verification included
Demo kit attack scenarios
Email support
Production SLA
DORA/NIS2 audit package
SIEM integration guide
Team onboarding session
Generate free license →

Starter

Contact for pricing· annual subscription

20 agent namespaces

For small teams with a focused AI agent deployment.

Full detection (all 5 channels)
Ed25519 .cal certificate signing
Offline verification included
SIEM integration guide (NDJSON/REST)
Email + Slack support
Key rotation support
DORA incident report template
Signed audit package
Team onboarding session
Contact for quote →
Most popular

Professional

Contact for pricing· annual subscription

100 agent namespaces

For regulated finance teams with DORA/NIS2 obligations.

Full detection (all 5 channels)
Ed25519 .cal certificate signing
Offline verification included
SIEM integration guide (NDJSON/REST)
DORA Art. 17 incident report template
Signed audit package (MANIFEST + .cal sidecars)
Priority support (SLA)
Key rotation support
Team onboarding session (1h)
MSSP / reseller terms
Apply for a Pilot →

Enterprise

Custom

Unlimited namespaces

Unlimited namespaces. Reseller and MSSP terms available.

Everything in Professional
Unlimited agent namespaces
Custom SLA
MSSP and reseller terms
Dedicated onboarding engineer
Architecture review
Private deployment support
Contact us →

EU AI Act high-risk provisions take effect August 2026. A Professional pilot started now delivers a signed audit package and DORA Art. 17 incident report template before the deadline — with buffer for production hardening. See the compliance mapping →

Frequently asked

What counts as a namespace?

A namespace is a Linux process namespace corresponding to a monitored AI agent workload — typically one container or one isolated agent process. H7 tracks namespaces by their kernel inode identifier.

Does H7 send data to Pulsaride servers?

No. After initial license token validation at startup (offline Ed25519 check), H7 makes zero outbound network connections. All behavioral data, .cal certificates, and detection artifacts remain on your host. Verifiable with strace — see the Trust Center.

Can I run H7 in an air-gapped environment?

Yes. Verification of .cal certificates requires only the published Ed25519 public key — a static 113-byte PEM file. No internet, no CA, no SaaS required after the binary is fetched.

What OS and kernel version does H7 require?

Linux ≥ 5.8 with eBPF CO-RE (BTF) support. x86_64 and aarch64. WSL2 with a ≥5.15 kernel works for the attack scenarios but does not support the live eBPF probe.

Is the 6-week pilot a separate offering from Professional?

The pilot is a fixed-scope engagement leading to a Professional or Enterprise subscription. At the end of 6 weeks you receive a signed Customer Acceptance Document and a production-ready H7 deployment.