Guardimesh offers tiered pricing based on cluster size and feature requirements. All tiers include the core runtime scanning engine — differentiation is in scale, integrations, and advanced features.
Pricing
| Tier | Monthly | Annual (save 20%) | Nodes Included |
|---|
| Trial | Free (7 days) | — | 2 |
| Individual | $29/mo | $278/yr ($23/mo) | 3 |
| Startup | $99/mo | $950/yr ($79/mo) | 5 |
| Team | $349/mo | $3,350/yr ($279/mo) | 25 |
| Enterprise | Custom | Custom | Unlimited |
Node limits include a soft buffer (~10% additional nodes) before hard enforcement. Contact sales for Enterprise pricing.
Usage Limits
| Limit | Trial | Individual | Startup | Team | Enterprise |
|---|
| Max nodes | 2 | 3 | 5 | 25 | Unlimited |
| Log retention | 14 days | 90 days | 90 days | 180 days | Custom |
| Max log rows | 10,000 | 100,000 | 500,000 | 1,000,000 | Unlimited |
| Logs per minute | 50 | 100 | 500 | 1,000 | Unlimited |
| API rate limit | 2/sec | 10/sec | 10/sec | 10/sec | 100/sec |
| API keys | 1 | 2 | 3 | 5 | Unlimited |
Scanning Features
Core runtime detection is available on all tiers including Trial:
| Feature | Trial | Individual | Startup | Team | Enterprise |
|---|
| ClamAV signature scanning | Yes | Yes | Yes | Yes | Yes |
| Runtime upperdir scanning | Yes | Yes | Yes | Yes | Yes |
Deleted binary scanning (/proc) | Yes | Yes | Yes | Yes | Yes |
| Executable drift detection | Yes | Yes | Yes | Yes | Yes |
| memfd fileless payload scanning | Yes | Yes | Yes | Yes | Yes |
| Deleted shared library scanning | Yes | Yes | Yes | Yes | Yes |
| Obfuscation scanner (YARA + ML) | Yes | Yes | Yes | Yes | Yes |
| Real-time file monitoring (fanotify) | No | No | Yes | Yes | Yes |
| Custom ClamAV signatures | No | No | No | Yes | Yes |
Why fanotify is tier-gated
Real-time file monitoring via the Linux fanotify API runs continuously on every node, generating ongoing CPU/IO load and backend traffic proportional to container filesystem write activity. This operational cost justifies limiting it to Startup tier and above.
Custom signature limits
| Tier | Max databases | Max size per database | Formats |
|---|
| Team | 10 | 2 MB | .hsb, .sfp, .db |
| Enterprise | Unlimited | 5 MB | .hsb, .sfp, .db, .ldb |
Integrations
| Integration | Trial | Individual | Startup | Team | Enterprise |
|---|
| Email notifications | Yes | Yes | Yes | Yes | Yes |
| Webhooks | No | No | Yes | Yes | Yes |
| Slack | No | No | Yes | Yes | Yes |
| PagerDuty | No | No | Yes | Yes | Yes |
| Jira | No | No | No | Yes | Yes |
| ServiceNow | No | No | No | Yes | Yes |
| Custom integrations | No | No | No | No | Yes |
Reporting
| Feature | Trial | Individual | Startup | Team | Enterprise |
|---|
| Basic reports (scan results, pod logs) | Yes | Yes | Yes | Yes | Yes |
| Advanced reports (dashboards, time-series, coverage, PDF export) | No | No | Yes | Yes | Yes |
Enterprise Features
Enterprise tier includes everything in Team, plus:
- Unlimited nodes — No cap on cluster size
- Unlimited data retention — Custom retention policies
- On-premise deployment — Full stack runs inside your cluster (air-gapped support)
- FedRAMP High / NIST 800-53 ready — On-premise operator deploys within your authorization boundary with FIPS 140-3 validated cryptography, UBI9 base images, and no external connectivity. See the Federal and Government Deployment guide for control mappings and assessor guidance.
- Custom integrations — Direct engineering support for bespoke integrations
- SLA guarantee — Contractual uptime and response time commitments
- Dedicated support — Priority support channel
- SSO/SAML — Enterprise identity provider integration
Trial Details
- Duration: 7 days from account creation
- Credit card: Not required
- Limits: 2 nodes, 10,000 log rows, 50 logs/minute
- Features: All scanning capabilities except fanotify and custom signatures
- After expiry: Scanners stop shipping results; existing data remains accessible in the console for 14 days
Choosing a Tier
| Use Case | Recommended Tier |
|---|
| Personal projects, learning, homelab | Individual |
| Small team, staging environments, < 5 nodes | Startup |
| Production workloads, compliance requirements, 5–25 nodes | Team |
| Large clusters, air-gapped environments, enterprise compliance | Enterprise |
Key decision points
- Need real-time file monitoring? → Startup or above
- Need custom ClamAV signatures for internal IOCs? → Team or above
- Need Jira/ServiceNow integration? → Team or above
- More than 25 nodes? → Enterprise
- Air-gapped / no internet access? → Enterprise
- Need SLA or SAML SSO? → Enterprise
Billing
- Billed monthly or annually via Stripe
- Annual billing saves 20%
- Upgrade or downgrade at any time from the web console
- Prorated charges on plan changes
- Node usage is measured by the number of distinct nodes reporting scan results in a billing period
Next Steps