Pricing and entitlements
Start free with one active framework, then scale into multi-framework assurance, AI-assisted analysis, policy generation, Agentic CISO governance, Gateway simulation and production runtime enforcement as your programme matures.
$0Free forever
For a first governed AI workspace, one active framework and a tightly bounded evaluation.
For teams running a structured AI assurance programme across core frameworks.
For deeper assurance, AI-assisted governance and controlled agentic workflow design.
Contact usTailored for production and scale
For production agentic runtime enforcement, connector action and enterprise scale.
These are the customer-facing limits reflected by the current Gamut application. Actual access is gated by both the workspace plan and the user's role.
| Limit | Free | Standard | Advanced | Enterprise |
|---|---|---|---|---|
| Price | $0 | Get a quote | Get a quote | Contact us |
| Paid seats | 1 | 5 | 25 | 100 by default |
| Read-only auditor seats | 1 bounded review invite for 14 days | Unlimited | Unlimited | Unlimited |
| AI systems | 3 | 25 | 200 | 999 by default |
| Intake records | 3 | 25 | 200 | 999 by default |
| Assessments | 1 active, up to 3 creations per rolling 12 months | 50 per year | 200 per year | 999 by default |
| Audit-trail retention | 90 days | 12 months | 36 months | 7 years |
| Active assessment frameworks | Choose 1: GTSAF, NIST AI RMF, EU AI Act or NAGF | GTSAF, EU AI Act, NIST AI RMF, NAGF | GTSAF, EU AI Act, NIST AI RMF, NAGF, MAESTRO, ACRS, ATF | Advanced frameworks, with ISO/IEC 42001 and ISO/IEC 42005 available only after licence confirmation |
| Read-only framework catalogue browsing | All 9: GTSAF, EU AI Act, NIST AI RMF, NAGF, MAESTRO, ACRS, ATF, ISO/IEC 42001, ISO/IEC 42005 | Plan frameworks | Plan frameworks | Plan frameworks and licensed ISO catalogues |
| AI analysis quota | 20/month | 20/day, 200/month | 50/day, 500/month | 999/day, 9,999/month |
| Policy generation quota | 0 | 2/day, 10/month | 100/day, 1,000/month | 999/day, 9,999/month |
| Default model tier | Haiku 4.5 | Haiku 4.5 | Sonnet 4.6 | Sonnet 4.6 |
Free is designed for bounded evaluation. Standard adds the operating evidence layer. Advanced adds agentic governance and simulation. Enterprise adds production runtime enforcement.
| Feature | Free | Standard | Advanced | Enterprise |
|---|---|---|---|---|
| Dashboard | Yes | Yes | Yes | Yes |
| Learning Hub | Yes | Yes | Yes | Yes |
| AI System Records | Yes | Yes | Yes | Yes |
| AI Use Case Intake | Yes | Yes | Yes | Yes |
| Assessments | One active framework | Yes | Yes | Yes |
| Risk Register | Yes | Yes | Yes | Yes |
| Model Cards | Yes | Yes | Yes | Yes |
| CSV export | Yes | Yes | Yes | Yes |
| Policies view | No | Yes | Yes | Yes |
| Policy generation | No | Limited generation | Yes | Yes |
| Policy publish and delete | No | No | Yes | Yes |
| AI analysis | Limited | Yes | Yes | Yes |
| AI Consultant and chat | No | No | Yes | Yes |
| Reports view | No | Yes | Yes | Yes |
| Full report export | No | Yes | Yes | Yes |
| Evidence Tracker | No | Yes | Yes | Yes |
| Findings Register | No | Yes | Yes | Yes |
| Workpaper Packs | No | Yes | Yes | Yes |
| Audit Trail viewer and export | No | Yes | Yes | Yes |
| Control Testing | No | No | Yes | Yes |
| Agentic CISO governance | No | No | Yes | Yes |
| Gateway policy simulation | No | No | Yes | Yes |
| Production Gateway enforcement | No | No | No | Yes |
| Claw production execution | No | No | No | Yes |
| BYO runtime credentials | No | No | No | Yes |
| Discovery | No | No | No | Yes |
Secure-by-design access: plan entitlements are enforced by the application, not only hidden in the interface. Role permissions and plan access must both allow a capability before it can be used.
Free and Standard workspaces can activate a one-time 14-day Advanced Trial Boost when eligible. It unlocks Advanced-level AI Consultant, control testing, Agentic CISO governance, Gateway simulation and the agentic framework suite for evaluation.
Use Free to evaluate the workflow on one active framework. Move to Standard when you need repeatable evidence, reports, workpapers and auditor access. Choose Advanced when you need AI-assisted governance, control testing and agentic simulation. Choose Enterprise when agents need to act through production Gateway and Claw controls.
Discuss the right planGamut is designed around tenant isolation, least privilege and defence in depth. The pricing tier changes what a workspace can do, not the security baseline protecting the workspace.
Row-level tenant isolation with fail-closed enforcement.
MFA and step-up MFA for sensitive changes.
Full audit trail on state-changing actions.
Role-based access and entitlement checks are both required.
Rate limiting, CSRF protection, CSP and HSTS in production.
AES-256-GCM at rest and encryption in transit.
