# Pricing - open core, plus operated assurance > Start free: the CLI, every attack family, an ASR with a 95% Wilson CI and a benign control, > SARIF and the GitHub Action are all in the free tool (Apache-2.0). Paid tiers add an > independent, human-led red-team of your own policy and a filable evidence pack. Simulation > only. Evidence, not certification. ## Open core - Free (Apache-2.0, forever) For the engineer. Run the full red-team yourself. Every attack family, the ASR with its benign control, SARIF and local attestation are in the free tool. - The CLI and every attack family - Attack-success rate with a 95% Wilson CI + benign control - SARIF + the GitHub Action CI gate - The Embodied AI Security Top 10 + local Ed25519 attestation pip install provael ## Checkpoint Report - $1,950 (one checkpoint · 5 business days) For a first, fixed-price measurement. A fixed-scope red-team of one checkpoint, no scoping call. Credited in full against a later assessment. - One checkpoint of yours, one suite, every attack family - Measured ASR with 95% Wilson CIs, a benign control, and a clean-task-success control - The full evidence pack: SARIF + a signed, offline-verifiable attestation - Delivered in 5 business days; the fee credits in full against a later assessment Fixed price, no scoping call. Credited against a later assessment. ## Embodied-AI Red-Team Assessment - $25,000 (standard · $15,000 for 3 of 3 founding design-partner spots) For the team shipping a policy. An independent, human-led red-team of your policy in simulation, with an evidence pack you can file. - A human red-teamer operating on your own policy, not a public proxy checkpoint - The keep-out predicate calibrated to your declared safety envelope - Narrated attack chains + a filable evidence pack (SARIF, OSCAL, ML-BOM) - One free retest after you remediate, plus the signed attestation included A scoped starting range, not a fixed quote. ## Continuous assurance retainer - from $3,000/mo (quarterly retest) For a policy that keeps shipping. Standing evidence for a moving policy: re-run the red-team each release and hold the line in CI. - Quarterly retest + new-attack-family coverage - A rolling per-checkpoint regression baseline - CI gated on your attack-success-rate threshold - Priority triage when a result regresses Scoped to fleet size. ## Team / fleet-CI - Contact for scope (per checkpoint) For a fleet of checkpoints. The continuous CI security gate as a subscription: every checkpoint red-teamed on every release, across the fleet. - Per-checkpoint continuous red-team in CI - The GitHub Action gate, synced across your fleet - A fleet-wide ASR view + regression alerts - Shared thresholds and evidence history Maps to the continuous CI security gate. ## Compliance & attestation report - Add-on (per engagement) For the buyer who signs off. An evidence pack for insurer and certifier review: the assurance views over a real run, signed and verifiable. - ISO 10218-2 / IEC 62443 SL2 / insurer assurance views - OSCAL assessment-results + a CycloneDX ML-BOM - Ed25519-signed attestation (verifies offline) - The honest per-family transfer statement Evidence, not certification. ## Single-maintainer disclosure Provael is built and maintained by one person. That is a real dependency for anything you rely on, so it is stated here rather than left to the About page: the tool is Apache-2.0 and forkable, every result is reproducible from a committed recipe, and no evidence you already hold stops being valid if this project does. What a single maintainer cannot offer is a service level, and none is published for that reason. Canonical: https://www.provael.com/pricing --- Provael · Prove it. Prevail. · Apache-2.0 · https://github.com/provael/provael Not legal advice; verify regulatory dates against the primary source.