Plans

Free is for one person, on their own machine, and stays free. Business runs it for a team. Enterprise is a conversation, not a card.

For one person, on their own machine

Free

$0 no card, and it stays that way

Your agents ask you first, in one inbox. Claude Code, Cursor, a connector, your own code.

Who does the work you, on your own machine.

  • The kernel that decides is open source, Apache-2.0, at ctrlrun.dev: no account, no card, no call with us
  • One approver: you
  • One connection: gateway, decorator or adapters
  • 500 governed actions a month on our dashboard
  • Approvals in your own assistant, by Slack DM, on Telegram or on WhatsApp, as each ships
  • Live feed and receipts, 30-day retention
  • At the cap ingestion pauses; your kernel keeps deciding

Start free

For a company

Business

$599 / month, 250k governed actions

Integrate, analyze, protect. One control room. A team with one real consequential workflow; clears on a card. Several teams, many agents, a security or compliance reviewer in the loop.

Who does the work your team, on our dashboard.

  • Everything in Free, for a team
  • 250k governed actions / month; $1.50 per 1k over
  • 5 connections: gateway, decorator, adapters
  • Agents and coverage: owner, environment, health, mode, scope, freshness
  • Live feed: every action, decision and outcome, searchable
  • Policies from one place: templates, versions, observe then enforce, rollout state
  • Approval inbox: exact-action cards, entitled reviewers, expiry, escalation
  • Approvals by webhook; budgets and signals; incidents
  • Approvals directly in Slack and Teams, mapped identities
  • SSO / SAML, roles and permissions
  • Receipts and verify in the dashboard; 1-year evidence retention
  • Policy simulation on your own history before rollout
  • Before / after comparison of every policy change
  • Insights labelled fact / derived / AI-generated, evidence-linked
  • Reports and evidence export for reviewers and auditors
  • Retention, redaction and deletion controls
  • Members: email, Google, GitHub; workspace isolation
  • Priority support, named contact

Start Business

When someone else has to say yes, that's Business.

Retention windows, hosting, and whatever your policy demands

Enterprise

Contact us. We price it on your needs.

Who does the work our engineers, with your team.

Discuss your deployment

  • Everything in Business, done for you
  • Discover, design, build, validate, roll out, maintain: one team, start to finish
  • We build the controlled agents your workflows need, on the boundary, and run them with you
  • Connectors to identity, SIEM, ticketing, payments and ledgers
  • Custom policies and approval chains, designed with your security and finance owners
  • Your deployment: dedicated, private network, or your own cloud
  • 5× the Business allowance; 7-year retention, legal hold, data residency
  • Evidence packages and control mappings your auditors ask for
  • Named technical lead and delivery team; agreed hours and response times
  • Ongoing engineering retainer, change handling, review cadence
Never metered
approvers, viewers, agents, blocked actions.
Never disabled
enforcement. It runs on your side in every plan; at the cap ingestion pauses and your kernel keeps deciding.
Every plan
portable receipts in open JSON, export any time.