Annual: €4,900/yr
For smaller estates that still need full, audit-ready PAM.
- Up to 25 managed targets
- Up to 50 named users
- 5 concurrent sessions
- 50 GB recording storage
- CET business-hours support
One price per tier. Everything included. No add-ons, no surprises.
Annual: €4,900/yr
For smaller estates that still need full, audit-ready PAM.
Annual: €14,900/yr · Most popular
The standard tier for organisations scaling privileged access.
Negotiated terms
Unlimited scale with negotiated terms and a guided proof of concept.
Annual billing — pay for 10 months, get 12. No other discounts on Starter or Business.
| Capability | Starter | Business | Enterprise |
|---|---|---|---|
| Managed targets | up to 25 | up to 100 | 100+ |
| Named users | up to 50 | up to 200 | unlimited |
| Concurrent sessions | 5 | 20 | unlimited |
| Recording storage | 50 GB included | 200 GB included | negotiated |
| Storage overage | €0.50/GB/mo | €0.50/GB/mo | negotiated |
| Support | CET business hours | 4h SLA, named engineer | dedicated contact |
| Trial | Get in Touch | by arrangement | guided PoC |
| Capability | Starter | Business | Enterprise |
|---|---|---|---|
| Agentless RDP, SSH, VNC, and HTTP session brokering | ✓ | ✓ | ✓ |
| Browser-based access — no client software on user devices | ✓ | ✓ | ✓ |
| Session recording with encrypted audit-ready storage | ✓ | ✓ | ✓ |
| Role-based access control (RBAC) with per-safe permission model | ✓ | ✓ | ✓ |
| EU-hosted infrastructure (GCP europe-central2, Warsaw) | ✓ | ✓ | ✓ |
| OpenBao (open-source Vault) for secrets management | ✓ | ✓ | ✓ |
| Keycloak-based identity integration (SAML / OIDC) | ✓ | ✓ | ✓ |
| Monitoring stack (Prometheus / Grafana / Loki) | ✓ | ✓ | ✓ |
| NIS2 and GDPR controls included — no compliance add-ons | ✓ | ✓ | ✓ |
Applies to Business tier and above.
20% off list
Business tier and above.
30% off list
Business tier and above. White-label option on roadmap.
Contact us to discuss trial options. Click Request a Demo to get started.
Any server, workstation, or network device registered in VaultPAM. Active sessions and passive assets count equally.
Yes — upgrade at any time, downgrade at next renewal.
GCP europe-central2, Warsaw, Poland. Data never leaves the EU.
EU-hosted · GCP Warsaw, Poland · SOC 2 Type II 2026 — final report pending · NIS2-aligned · GDPR-native