Is there really no credit card required for Free?

None. Connect one account, get findings, keep the plan indefinitely.

Can we switch between Pro and Enterprise mid-contract?

Yes. Pro is month-to-month; upgrading to Enterprise moves you onto an annual contract with SLAs and support commitments.

Do you offer a nonprofit or academic discount?

Yes — contact sales. Verified nonprofits and academic institutions receive a discount on Pro and Enterprise.

How is usage measured for billing?

Onam samples resource counts daily and averages them across the billing period. You are never charged for a resource that no longer exists.

Are Onam Estate and Onam FinOps included in Pro or Enterprise?

No. Both are separate products enabled per organisation, not features of a security tier — so upgrading your security plan does not turn them on, and buying one of them does not require a security plan. Talk to sales about either.

Can we buy Onam FinOps without Onam Security?

Yes. Each product stands alone. If you do run more than one they share the same login, the same console and the same discovery, so you are not connecting your cloud accounts twice.

Pricing

Straightforward pricing for cloud security.

Q: How does the $22 / resource / month pricing work?

A resource is any billable cloud object we scan — an EC2 instance, an S3 bucket, a Lambda, an IAM user, a Kubernetes pod, and so on. You pay per active resource at the end of each billing period. No overage penalties.

Try it free, no credit card required.

Free

forever

Connect one account and start finding misconfigurations — no time limit, no credit card.

Start free

1 cloud account

Up to 500 resources

Core CSPM rules (Critical & High)

CIS benchmark coverage

30-day finding history

Community support

CIEM & threat detection

Compliance report export

Team access & SSO

Product add-ons

Granted per organisation

Onam Estate and Onam FinOps are separate products, not tiers of Onam Security. They are enabled per organisation rather than bundled into a plan, so a team that wants the cost picture does not have to buy a security plan to get it — and neither one changes what your security plan includes.

Onam Estate

What do we actually run, and how is it wired together?

Continuous discovery of every cloud resource and the relationships between them — the estate of record, with cost on every row.

Contact sales

Talk to us

What Onam Estate does →

Onam FinOps

Where is the money going, and who owns it?

Cloud cost and commitment management on reconciled billing data — attribution, forecast, budgets, anomalies and savings.

Contact sales

Talk to us

What Onam FinOps does →

Compare plans

What's included in each tier

Feature	Free	Pro	Enterprise
Cloud accounts	1	Unlimited	Unlimited + multi-tenant
Resources scanned	Up to 500	Pay-as-you-go	Custom
Security engines	Core CSPM	All 29 engines	All 29 engines · custom rules
SaaS security (SSPM)	—	All 8 platforms	All 8 + custom connectors
Agentless workload scanning	—	Included	Included · custom schedules
Compliance frameworks	CIS	All 78 frameworks	All 78 + custom builder
Finding history	30 days	1 year	Custom retention
Notifications	—	Email + Slack	Email, Slack, webhooks, SIEM
API access	—	REST	REST + Terraform provider
SSO / SAML 2.0	—	—	Included
RBAC	—	Basic	Custom roles
Support	Community	Email (< 24h)	Priority (< 4h) + CSM
Uptime SLA	—	—	99.9% contractual
Deployment	SaaS	SaaS	SaaS or on-prem
Onam Estate / Onam FinOps	—	Add-on	Add-on

Pricing FAQ

Things people ask before buying

A resource is any billable cloud object we scan — an EC2 instance, an S3 bucket, a Lambda, an IAM user, a Kubernetes pod, and so on. You pay per active resource at the end of each billing period. No overage penalties.

Need a bespoke quote?

Talk to sales →