Free
Try it, no strings attached.
- 1 user, 1 agent
- 10 entries
- Three-tier encryption
- WebAuthn PRF
- All regions
价格
注册时的价格就是你永远的价格。
What that means: the price you subscribe at today is locked in. If we raise our list prices next year, your subscription stays at the original rate. As long as you stay active, it never goes up. It's a commitment, not a promo.
Try it, no strings attached.
适合独立用户及其 AI 代理。
与家人共享。
适合团队和中小企业。
For MMEs and MSPs with identity.
高级安全与合规。
功能对比
没有隐藏限制。你看到的就是你得到的。
| Feature | Free | Individual | Family | Teams | Mid-Market | Enterprise |
|---|---|---|---|---|---|---|
| 用户与代理 | ||||||
| UsersPeople with their own login | 1 | 1 | Up to 6 | Scales | Scales | Scales |
| AI agentsClaude Code, Codex, custom | 1 | 3 | 18 (3/user) | 3/user | 3/user | 3/user |
| Entries | 10 | 无限制 | 无限制 | 无限制 | 无限制 | 无限制 |
| Cross-vault sharingAdd your hardware key to another vault | ||||||
| 加密层级 | ||||||
| Tier 1 · VaultEntire vault encrypted at rest, AES-256-GCM | ||||||
| Tier 2 · CredentialAPI keys, OAuth tokens, TOTP, passwords | ||||||
| Tier 3 · IdentityWebAuthn PRF, server cannot decrypt | ||||||
| 代理与集成 | ||||||
| CLI + SDKs | ||||||
| HTTPS ProxyCredential injection at network layer | ||||||
| MCP — notes & memoryAI agents store and retrieve encrypted notes | ||||||
| MCP — credential accessScoped proxy layer, capability-by-reference | ||||||
| Claude Code · Codex · OpenClaw | ||||||
| Scoped agent tokensPer-agent, per-entry access | ||||||
| TOTP generation for agents | ||||||
| Clients | ||||||
| Browser extensionChrome, Firefox, Safari, Edge, Brave | ||||||
| Mobile appsiOS and Android | ||||||
| Password generator | ||||||
| ImportFrom 14 sources | ||||||
| 管理与网络 | ||||||
| 管理控制台 | ||||||
| 基于角色的访问控制 | ||||||
| Group-based rotationRotate keys for a team, not an individual | ||||||
| Primary POP choicePoint of Presence — pick your region; your vault lives there | ||||||
| Encrypted geo-redundant replicationAutomatic fail-over copy on the opposite side of the world | ||||||
| Geo-distributed writesWrites replicate across regions, continue from failover | ||||||
| Read availability SLA | 99.99% | 99.99% | 99.99% | 99.99% | 99.99% | 99.99% |
| Write availability SLA | 99.99% | |||||
| 安全与合规 | ||||||
| 审计日志保留 | 7 days | 30 天 | 90 天 | 90 天 | 1 年 | Indefinite |
| SSH certificate issuance | ||||||
| SSO (SAML / OIDC) | ||||||
| SCIM 账户供给 | ||||||
| SIEM pull endpointJSON / NDJSON, cursor-based | ||||||
| Real-time SIEM streaming | ||||||
| HMAC-signed webhooksSOAR / Slack / Teams | ||||||
| Tamper-proof audit signing | ||||||
| 4-eyes recoveryTwo-admin approval for vault recovery | ||||||
| SOC 2 Type II 报告 | ||||||
| HIPAA BAA / DPA | ||||||
| Virtual appliance / DockerRun Clavitor inside your own perimeter | ||||||
| 技术支持 | ||||||
| 邮件支持 | Community | 72h | 48h | 24h | 24h | 4h |
| 优先通道(Slack Connect) | ||||||
| Dedicated account manager | ||||||
| 专属解决方案工程师 | ||||||
What you see is what you pay. No per-action fees, no token counting, no vault-size tiers. Individual is $1/mo. Family is $3/mo. Teams ($3), Mid-Market ($6), and Enterprise ($12) are per-seat 每月 rates. Prices exclude tax.
Export anytime, cancel in one click. Vault contents export as a signed JSON bundle. Your data is deactivated at the end of your billing period and deleted after 30 days.
7 days to undo any charge. After any transaction — signup, renewal, or monthly invoice — you can cancel and get a full refund. Self-service, instant, no questions asked.
Individual and Family pay once a year — $12 and $36 respectively. Teams, Mid-Market, and Enterprise pay monthly per seat, based on the number of active seats on the 1st of each month. Every plan charges at signup. Your billing cycle starts on the 1st of the following month, and the partial month in between is on us.
Price for life. Your rate is locked the moment you sign up. We may raise prices for new customers. Yours never changes. Not after a year, not after five. We absorb inflation, exchange rate changes, and infrastructure costs. Cancel or stop paying, and the lock is forfeited.
Any distinct automated identity that authenticates against your vault — Claude Code running on your laptop, a Codex session on a server, a custom agent. Humans aren't agents; they're users.
Family is $3/mo ($36/yr) for up to 6 users and 18 agents — priced for a household that shares trust. Teams is $3/seat/mo with an admin console and role-based access. If you're a team of 2, Family is cheaper. Past 6 users, Teams is the right fit.
Teams covers the credential basics — vault, agents, admin console, RBAC. Mid-Market adds the integrations that growing orgs and MSP-managed customers expect: SCIM provisioning from your IdP, SSH certificate issuance, a SIEM pull endpoint, HMAC-signed webhooks, group-based rotation, and a longer audit retention (1 year vs 90 days). If your team has Azure AD, Okta, or any SAML/OIDC provider — and a SIEM you want events in — Mid-Market is the right fit.
Enterprise adds geo-distributed writes with a 99.99% write SLA (writes continue from failover during a regional outage), 4-eyes recovery (two admins must approve any vault recovery), indefinite audit retention with real-time SIEM streaming and tamper-proof signing, SOC 2 Type II, HIPAA BAA, and the option to deploy as a virtual appliance inside your own perimeter. Plus a dedicated account manager and 4-hour incident response.
Because your agent isn't local. It runs on a server, in a container, across devices. Local storage can't issue scoped tokens, can't replicate across regions, and can't enforce field-level encryption tiers. A vault gives your agent a narrow API surface — it never holds the keys.
不会。用户和代理分开计算,各自有独立的方案上限。
Nothing automatic — we won't downgrade you or start charging overages. We'll email you at 90% of a limit and walk you through either upgrading or cleaning up. Your agents keep working.
The free tier is the trial — 10 entries, full encryption, all features, no credit card. When you're ready to upgrade, you pay at signup and your billing cycle starts on the 1st of the following month. The partial month in between is free.
Mid-Market is $6/seat/mo, Enterprise is $12/seat/mo — published, same for everyone, no quote-only opacity. Both are usage-based and billed monthly in arrears against actual active seats on the 1st of each month (6-seat minimum). For Enterprise, add-ons like virtual appliance deployment and custom SLA terms are scoped in a single call.
Clavitor 让保险库保持距离:独立基础设施、独立信任边界、异地冗余复制。你的代理调用一个窄范围的 API——它们永远不持有密钥。