Onam
Pricing

Four products. Buy the ones you need.

Onam Security has published plans and a free tier, no credit card required. Onam Estate, FinOps and DRM are stand-alone products granted per organisation. Onam AIOps is in early access.

Onam Security plans

Cloud posture, identity, data, workloads, attack paths and compliance — every engine on one security graph. What Onam Security does

Free
$0
forever

Connect one account and start finding misconfigurations — no time limit, no credit card.

1 cloud account
Up to 500 resources
Core CSPM rules (Critical & High)
CIS benchmark coverage
30-day finding history
Community support
CIEM & threat detection
Compliance report export
Team access & SSO
Most popular
Pro
$22
per resource / month

Every security layer. Unlimited accounts. Platform fee plus $22 per resource, billed monthly.

Unlimited cloud accounts
$22 / resource / month, pay-as-you-go
All 29 engines — CNAPP, CSPM, CIEM, DSPM, CWPP, SSPM
All 78 compliance frameworks
CIEM & identity attack paths
Agentless workload scanning — no agents to deploy
SaaS security — M365, Workspace, GitHub, Snowflake
Threat detection — MITRE ATT&CK mapped
Network, API, database & encryption posture
Vulnerability management with EPSS scoring
AI assistant & per-finding remediation
1-year finding history
Email & Slack notifications
REST API access
Email support
Enterprise
Custom
annual contract

For regulated organisations that need agreed service levels, custom frameworks, and dedicated support.

Everything in Pro
Multi-tenant organisation support
Custom compliance framework builder
SSO / SAML 2.0
RBAC with custom roles
Dedicated security engineer
On-premises deployment option
Custom data retention
Service levels agreed in your contract
Priority support
Quarterly posture review
Custom contract & invoicing

Onam Estate, FinOps and DRM

Stand-alone · granted per organisation

Each is its own product, granted per organisation — not a tier or feature of Onam Security. None of them requires a security plan, and upgrading a security plan does not turn them on. If you run more than one product, they share one login, one console and one discovery, so your cloud accounts are connected once. No price is published yet; talk to us.

Onam Estate
What do we actually run, and how is it wired together?

Continuous discovery of every cloud resource and the relationships between them — one estate of record that every other product works from.

Contact sales
Talk to us
What Onam Estate does →
Onam FinOps
Where is the money going, and who owns it?

Cloud cost and commitment management on reconciled billing data — attribution, forecast, budgets, anomalies and savings.

Contact sales
Talk to us
What Onam FinOps does →
Onam DRM
If a region fails tonight, what comes back, in what order, and how fast?

Disaster recovery management — applications and dependencies mapped, protection read from cloud configuration, predicted RTO and RPO against your targets, and drift from the plan you approved.

Contact sales
Talk to us
What Onam DRM does →

Onam AIOps

Early access

AI agents that investigate across the platform with evidence on every claim, and propose changes a person approves. Nothing changes your cloud without that approval.

By invitation. Running on the Onam platform and enabled per organisation by invitation. Agents answer and propose; nothing changes your cloud. Agents work on your Onam Security data today. No price is published.

What Onam AIOps does
Ask for an invitation
Cloud marketplaces

Buy Onam through your cloud marketplace.

Onam is listed on Microsoft Marketplace, so you can procure it where your company already buys cloud software. Google Cloud and AWS listings are on the way; until then, buy directly — talk to us.

Compare plans

What's included in each Onam Security plan

The plans below cover Onam Security only. Onam Estate, FinOps and DRM are granted separately, per organisation, and are not part of any plan.

FeatureFreeProEnterprise
Cloud accounts1UnlimitedUnlimited + multi-tenant
Resources scannedUp to 500Pay-as-you-goCustom
Security enginesCore CSPMAll 29 enginesAll 29 engines · custom rules
SaaS security (SSPM)—All 8 platformsAll 8 + custom connectors
Agentless workload scanning—IncludedIncluded · custom schedules
Compliance frameworksCISAll 78 frameworksAll 78 + custom builder
Finding history30 days1 yearCustom retention
Notifications—Email + SlackEmail, Slack, webhooks, SIEM
API access—RESTREST + Terraform provider
SSO / SAML 2.0——Included
RBAC—BasicCustom roles
SupportCommunityEmailPriority + CSM
Service levels——Agreed in your contract
DeploymentSaaSSaaSSaaS or on-prem
Pricing FAQ

Things people ask before buying

A resource is any billable cloud object we scan — an EC2 instance, an S3 bucket, a Lambda, an IAM user, a Kubernetes pod, and so on. You pay per active resource at the end of each billing period. No overage penalties.

Need a bespoke quote?