One agent. Flexible Pricing.
Buy a module, a bundle, or the whole platform.
Start with a single capability or save with a bundle. Every plan is per user, per month, billed annually.
Bundles for the way you buy security
Curated sets of modules at roughly 25–30% less than buying them individually.
Most popular for AI adopters
Gen AI & Agent Security
Roll out AI safely: see every Gen AI app,AI agent tool, govern who uses what, and keep sensitive data from leaking out to chatbots.
$18 /user/mo billed annually
Separately $24 · Save $6
Includes
- UEM
- SWG
- DLP
- AI Governance pack
Data Security
Protect and prove control over sensitive data across endpoints, SaaS, Gen AI, and web, with the device trust to anchor it.
$15
/user/mo billed annually
~30% less than buying modules separately
Includes
- DLP
- SWG
- UEM Core
Best value
Complete Platform
The whole platform in one agent — all four modules plus AI governance. Replace your stack.
$22
/user/mo billed annually
Separately $31 · Save $9
Includes
- UEM
- SWG
- DLP
- ZTNA
- AI Governance pack
ZTNA can be added to any bundle. The AI Governance pack is included in Gen AI & Agent Security and the Complete Platform, and is available as an add-on elsewhere.
- Save with a bundle
Bundles for the way you buy security
Curated sets of modules at roughly 25–30% less than buying them individually.
Most popular for AI adopters
Gen AI & Agent Security
Roll out AI safely: see every AI tool, govern who uses what, and keep sensitive data out of prompts.
Contact sales
Includes
- UEM
- SWG
- DLP
- AI Governance pack
Data Security
Protect and prove control over sensitive data across endpoints, web and SaaS — with the device trust to anchor it.
Contact sales
Includes
- DLP
- SWG
- UEM Core
Best value
Complete Platform
The whole platform in one agent — all four modules plus AI governance. Replace your stack.
Contact sales
Includes
- UEM
- SWG
- DLP
- ZTNA
- AI Governance pack
ZTNA can be added to any bundle. The AI Governance pack is included in Gen AI & Agent Security and the Complete Platform, and is available as an add-on elsewhere.
- Or build your own
Individual modules
Every module runs on the same lightweight agent. Buy only what you need and add more anytime.
- UEM
Device Shield
Unified Endpoint
Management
Manage and secure every device — enrollment, posture, compliance and lifecycle.
$7 /user/mo billed annually
- Cross-platform device enrollment (Windows, macOS, Linux)
- Basic compliance & encryption policies
- Real-time device inventory and asset tracking
- Device onboarding & off boarding
- Remote lock & remote wipe
- Remote Scripts (e.g., PowerShell, Bash)
- MDM Support (iOS & Android)
- IAM integration (AD, SSO, MFA)
- Discover Apps and browser extensions
- Compliance automation & reporting
- Integration with GRC tools
ENTERPRISE ADDS Patch management, app deployment (MAM), UEBA & 4-hr SLA
- SWG
App & User Shield
Secure Web
Gateway
Secure web, SaaS and Gen AI access at the endpoint, with full usage visibility.
$5 /user/mo billed annually
- URL & web content filtering (categories + custom allow/block lists)
- SaaS Application Discovery, Classification & Control
- Gen AI Application Discovery, Classification & Control
- Block data transfer to unsanctioned SaaS & Gen AI apps
- Phishing & Identity theft Prevention
- Data transfer metrics, user behavior analytics & reporting dashboard
- Device/user policy groups
ENTERPRISE ADDS Geo-fencing, SaaS cost optimization & 4-hr SLA
- DLP
Data Shield
Data Loss
Prevention
Classify, track and stop sensitive data leaving endpoints, web and SaaS.
$12 /user/mo billed annually
- Sensitive data discovery & classification
- Device control (USB, external drives)
- Sensitive data lineage tracking
- Sensitive data copy/paste alerts
- Get data exfiltration alerts
Network DLP
(Includes SWG functionality)
(Includes SWG functionality)
- Network activity tracking
- Sensitive data upload/download alerts
- URL & web content filtering
- Block data transfer to unsanctioned SaaS & Gen AI apps
ENTERPRISE ADDS Compliance reporting & automation (SOC 2, ISO, PCI, HIPAA, GDPR) & 4-hr SLA
- ZTNA
Infra Shield
Zero Trust Network
Access
Passwordless, device-trust access to your cloud and private apps — no VPN.
$7 /user/mo billed annually
- Secure access to single cloud (AWS, Azure, GCP, OCI)
- Multi-OS support (Mac, Windows, Linux)
- Passwordless access on device trust
- Just-in-time access with continuous identity verification (MFA, device trust)
- Low latency, high performance
ENTERPRISE ADDS Multi-cloud + on-prem access & 4-hr SLA
- Or build your own
Individual modules
Every module runs on the same lightweight agent. Buy only what you need and add more anytime.
- UEM
Device Shield
Unified Endpoint
Management
Advanced device management & compliance for established companies
$10 /user/mo billed annually
- AI agent for IT automation
- AI agent for security & compliance
- Cross-platform device enrollment (Windows, macOS, Linux)
- Basic compliance & encryption policies
- Real-time device inventory and asset tracking
- Device onboarding & off boarding
- Remote lock & remote wipe
- Remote Scripts (e.g., PowerShell, Bash)
- MDM Support (iOS & Android)
- IAM integration (AD, SSO, MFA)
- Discover & Manage Apps and browser extensions
- Patch management & vulnerability remediation
- Enhanced compliance automation & reporting
- Integration with GRC tools
- App deployment & updates (Mobile App Management - MAM)
- Application blacklisting/whitelisting
- User & Entity Behavior Analytics (UEBA)
- App distribution
- Enterprise support with 4 Hour SLA for any critical issues
ENTERPRISE ADDS Patch management, app deployment (MAM), UEBA & 4-hr SLA
- SWG
App & User Shield
Secure Web
Gateway
Great package for startups and small
organizations
$7 /user/mo billed annually
- AI agent for IT automation
- AI agent for security & compliance
- URL & web content filtering (categories + custom allow/block lists)
- SaaS Application Discovery, Classification & Control
- Gen AI Application Discovery, Classification & Control
- Block data transfer to unsanctioned SaaS & Gen AI apps
- Phishing & Identity theft Prevention
- Data transfer metrics, user behavior analytics & reporting dashboard
- Device/user policy groups
- Geo-fencing
- SaaS Cost Optimization & Management
- Enterprise support with 4 Hour SLA for any connectivity issues
ENTERPRISE ADDS Geo-fencing, SaaS cost optimization & 4-hr SLA
- DLP
Data Shield
Data Loss
Prevention
Full-featured DLP across endpoints and network
$15 /user/mo billed annually
- AI agent for IT automation
- AI agent for security & compliance
- Sensitive data discovery & classification
- Device control (USB, external drives)
- Sensitive data lineage tracking
- Sensitive data copy/paste alerts
- Get data exfiltration alerts
- Compliance reporting (SOC2, ISO 27001, PCI, HIPAA, GDPR & more)
- Compliance automation
Network DLP
(Includes SWG functionality)
(Includes SWG functionality)
- Network activity tracking
- Sensitive data upload/download alerts
- URL & web content filtering
- Block data transfer to unsanctioned SaaS & Gen AI apps
- Enterprise support with 4 Hour SLA for any connectivity issues
ENTERPRISE ADDS Compliance reporting & automation (SOC 2, ISO, PCI, HIPAA, GDPR) & 4-hr SLA
- ZTNA
Infra Shield
Zero Trust Network
Access
Advanced access control tailored for Multi-cloud and hybrid work environment
$9 /user/mo billed annually
- AI agent for IT automation
- AI agent for security & compliance
- Secure access to single cloud (AWS, Azure, GCP, OCI)
- Multi-OS support (Mac, Windows, Linux)
- Passwordless access on device trust
- Secure access to on-premises datacenter
- Just-in-time access with continuous identity verification (MFA, device trust)
- Low latency, high performance
- Enterprise support with 4 Hour SLA for any connectivity issues
ENTERPRISE ADDS Multi-cloud + on-prem access & 4-hr SLA
- At a glance
What’s in each bundle
Exactly which modules each bundle includes — so you can see the fit at a glance.
| Module | Gen AI & Agent Security | Data Security | Complete Platform |
|---|---|---|---|
UEMDevice Shield | Full | Core | Full |
SWGApp & User Shield | |||
DLPData Shield | |||
ZTNAInfra Shield | Add-on | Add-on | |
AI Governance packShadow-AI discovery, prompt DLP, agent/OAuth governance | Add-on | ||
Priceper user / month, billed annually | $18 /user/mo | $15 /user/mo | $22 /user/mo |
“Core” UEM = device inventory, compliance posture and basic enforcement to anchor data & web policies (not full lifecycle, MDM or patch management).
- Add to any plan
AI Agents
Token-powered agents that layer onto any module or bundle. Each comes with an included monthly allowance; usage beyond it is billed in simple packs — with spend caps and alerts, so there are no surprises.
- Enterprise plans include a starter AskCISO allowance · the Complete Platform includes an Admin Copilot allowance.
For every employee
Add-on
AskCISO Agent
An IT & security assistant that answers employees’ questions instantly and deflects helpdesk tickets.
$3
Includes
Overage
50 resolutions
/ user / month
$9 per 100 resolutions
- Instant answers to IT, security & policy questions
- Deflects tickets from your helpdesk
- Tailored to your environment & policies
- Works in chat, Slack or the user portal
For admins & security teams
Add-on
Admin Copilot
A security & compliance agent that answers org-level questions and takes action — without living in the UI.
$8
Includes
Overage
500 actions
/ month (pooled)
$20
per 250 actions
- Org-level answers across your security posture
- Take action without the UI — query, quarantine, report
- Compliance & audit Q&A on demand
- Natural-language automation of routine tasks
- Monthly spend caps
- Usage alerts at 80% & 100%
- Optional hard-stop on overage
- Unused allowance never bills
Resolutions and actions are plain-English usage units — you’re never billed in raw tokens. Allowances reset monthly and don’t roll over.
- Enterprise
Need a custom enterprise package?
Get a tailored plan for larger teams, platform-wide deployments, multi-year agreements, partner-led rollouts, and advanced support needs.
- Volume pricing
- Platform-wide deployment
- Multi-year agreements
- Partner-led rollouts
- Advanced support & SLAs
- Custom bundles
- Fully managed
Prefer we run it for you?
Complete IT, security and compliance as a service — all four modules, monitored and managed by Kitecyber experts, with vCISO and audit support.
- Device & alert monitoring + bundled EDR
- Compliance automation & audit support
- SLA-backed onboarding/offboarding
- vCISO, risk assessment & pen testing
Questions
Pricing FAQ
Pricing is per user, per month, billed annually. You can buy any individual module, combine several, or pick a bundle for a built-in discount. Everything runs on one lightweight agent, so adding modules later doesn’t mean another deployment.
If you have a single need, buy that module. If you’re solving a broader goal, a bundle is cheaper: choose Gen AI & Agent Security to roll out AI safely, Data Security to protect data and meet compliance, or the Complete Platform to replace several tools at once.
Pro covers the core capabilities of each module. Enterprise adds advanced controls — patch management and app deployment for UEM, geo-fencing and SaaS cost optimization for SWG, compliance reporting and automation for DLP, multi-cloud and on-prem access for ZTNA — plus a 4-hour SLA on critical issues. Use the toggle above to see prices for each tier.
UEM Core provides device inventory, compliance posture and basic enforcement — enough to anchor your data and web policies to a trusted device. It doesn’t include full device lifecycle management, MDM provisioning or patch management. Upgrade to the Gen AI or Complete bundle (or add the full UEM module) for those.
It’s the AI-specific layer on top of SWG and DLP: shadow-AI discovery, sanctioned/unsanctioned AI controls, prompt-level data protection (paste & upload), OAuth/agent governance, and AI usage analytics. It’s included in Gen AI & Agent Security and the Complete Platform, and available as an add-on to other plans.
Yes. ZTNA is included in the Complete Platform and can be added to the Gen AI or Data Security bundle as an add-on. Talk to us for add-on pricing.
The two AI Agents are usage-based add-ons you can attach to any module or bundle. Each has a small access fee — AskCISO Agent per user, Admin Copilot per admin — that includes a monthly allowance of usage. Beyond the allowance, you buy more in simple packs. You’re billed in plain-English units (resolutions and actions), never in raw tokens.
A resolution is one completed Q&A interaction with the AskCISO Agent — an employee asks a question and gets an answer. An action is one query or task run by the Admin Copilot, such as pulling an org-level report or executing a change. These map to your token usage behind the scenes, but you only ever see whole units.
Yes — you can start a free trial and deploy the agent in your own environment before you buy. Start free trial.
