Governance is never metered.
One seat price for everything Marshal does. The only usage meter is optional payload capture — and metadata evidence is always included regardless.
Team
Everything Marshal does, for everyone you govern. Billed only for identities active that month.
Book a walkthrough- All five LLM providers and remote MCP servers
- All four policy dimensions
- Unlimited enforcement and metadata Audit Events
- Search, export, dashboards, budgets, and alerts
- SSO, SCIM, and identity lifecycle controls
- The egress allowlist playbook for key custody
Enterprise
For organizations that need compliance depth, negotiated terms, and scale.
Talk to us- Everything in Team
- Negotiated volume pricing on seats
- SIEM streaming for Audit Events
- Custom DLP patterns
- Extended, negotiated retention
- SLA and dedicated support
Understand active governed identity.
The only usage meter: payload capture.
Opt in to store prompts, responses, and tool arguments for forensics. Three numbers describe the entire meter:
Ingestion
per 100k captured requests
Charged only when payload capture is on, per request whose prompts, responses, or tool arguments are stored.
Storage allowance
pooled / month, included
Captured payloads draw from one org-wide pool. Retention and redaction are configured before anything is stored.
Metadata evidence
always included
Identity, model, tokens, cost, and verdict are recorded on every request at no charge — capture on or off.
Estimate your cost
People and service accounts. Only identities active in a given month are billed.
Your estimate
$60,000 / year
Talk to us
Above 500 governed identities we'll size volume pricing to your rollout.
Above 250 identities, volume tiers apply — the calculator shows list price.
What counts as an active governed identity?
People
Engineers in Claude Code or Cursor, analysts in internal tools, anyone whose requests flow through the gateway under their own Virtual Key.
Service accounts
CI pipelines, agents, and backend services get their own identity-bound Virtual Keys — governed and billed like any other identity.
Only active ones
An identity counts toward your bill only in months where it makes at least one governed request. Dormant accounts cost nothing.
Compare plans
Team
$50 / identity / mo
Enterprise
Custom
Pricing questions
What counts as an active governed identity?
Any user or service account that makes at least one request through Marshal in a given month. Identities that made no requests that month are not billed.
What is never metered?
Policy decisions, Audit Events, dashboards, search, export, budgets, and alerts. You will never pay more because Marshal enforced more.
How does payload capture billing work?
Metadata is always included. If your organization opts into storing prompts, responses, or tool arguments for forensics, ingestion is billed at $0.75 per 100k captured requests, with a pooled storage allowance of 10 GB per month included. Retention and redaction stay under your control.
Do I still pay my LLM providers?
Yes. Marshal governs and meters your existing provider accounts — your Anthropic, OpenAI, Google, Bedrock, and Azure bills stay exactly where they are. Marshal's fee is for governance, not inference.
Put every AI request under control.
We're onboarding a small cohort of security and platform teams as design partners — teams that already own this problem and want to shape the answer.