Pricing and entitlements

Loved by auditors. Priced for teams governing AI systems and agents.

Start free with one active framework, then scale into multi-framework assurance, AI-assisted analysis, policy generation, Agentic CISO governance, Gateway simulation and production runtime enforcement as your programme matures.

Create a Free workspace Talk to Gamut

Show self-serve prices in your preferred currency.

Start here

Free

$0Free forever

For a first governed AI workspace, one active framework and a tightly bounded evaluation.

  • 1 paid seat
  • 3 AI systems and 3 intake records
  • 1 active assessment, up to 3 creations per rolling 12 months
  • Choose 1 active framework: GTSAF, NIST AI RMF, EU AI Act or NAGF
  • Read-only catalogue browsing for all 9 supported frameworks
Start
Team baseline

Standard

$499/month$4,990/year

For teams running a structured AI assurance programme across core frameworks.

  • 5 paid seats plus unlimited read-only auditor seats
  • 25 systems, 25 intake records, 50 assessments/year
  • GTSAF, EU AI Act, NIST AI RMF and NAGF
  • Reports, report export, evidence, findings, workpapers and audit trail
  • 20 AI analysis calls/day, 200/month
  • 2 policy generation calls/day, 10/month
Start Free
Automation layer

Advanced

$1,499/month$14,990/year

For deeper assurance, AI-assisted governance and controlled agentic workflow design.

  • 25 paid seats plus unlimited read-only auditor seats
  • 200 systems, 200 intake records, 200 assessments/year
  • Adds MAESTRO, ACRS and ATF to the core frameworks
  • AI Consultant, control testing, Agentic CISO and Gateway simulation
  • 50 AI analysis calls/day, 500/month
  • 100 policy generation calls/day, 1,000/month
Start Free
Production runtime

Enterprise

Contact usTailored for production and scale

For production agentic runtime enforcement, connector action and enterprise scale.

  • 100 paid seats by default plus unlimited read-only auditor seats
  • 999 systems, 999 intake records, 999 assessments by default
  • Advanced framework access with ISO access subject to licence confirmation
  • Production Gateway enforcement, Claw execution, BYO runtime credentials and Discovery
  • 999 AI analysis calls/day, 9,999/month
  • 999 policy generation calls/day, 9,999/month

Plan limits

These are the customer-facing limits reflected by the current Gamut application. Actual access is gated by both the workspace plan and the user's role.

LimitFreeStandardAdvancedEnterprise
Price$0$499/month or $4,990/year$1,499/month or $14,990/yearContact us
Paid seats1525100 by default
Read-only auditor seats1 bounded review invite for 14 daysUnlimitedUnlimitedUnlimited
AI systems325200999 by default
Intake records325200999 by default
Assessments1 active, up to 3 creations per rolling 12 months50 per year200 per year999 by default
Audit-trail retention90 days12 months36 months7 years
Active assessment frameworksChoose 1: GTSAF, NIST AI RMF, EU AI Act or NAGFGTSAF, EU AI Act, NIST AI RMF, NAGFGTSAF, EU AI Act, NIST AI RMF, NAGF, MAESTRO, ACRS, ATFAdvanced frameworks, with ISO/IEC 42001 and ISO/IEC 42005 available only after licence confirmation
Read-only framework catalogue browsingAll 9: GTSAF, EU AI Act, NIST AI RMF, NAGF, MAESTRO, ACRS, ATF, ISO/IEC 42001, ISO/IEC 42005Plan frameworksPlan frameworksPlan frameworks and licensed ISO catalogues
AI analysis quota20/month20/day, 200/month50/day, 500/month999/day, 9,999/month
Policy generation quota02/day, 10/month100/day, 1,000/month999/day, 9,999/month
Default model tierHaiku 4.5Haiku 4.5Sonnet 4.6Sonnet 4.6

Feature access

Free is designed for bounded evaluation. Standard adds the operating evidence layer. Advanced adds agentic governance and simulation. Enterprise adds production runtime enforcement.

FeatureFreeStandardAdvancedEnterprise
DashboardYesYesYesYes
Learning HubYesYesYesYes
AI System RecordsYesYesYesYes
AI Use Case IntakeYesYesYesYes
AssessmentsOne active frameworkYesYesYes
Risk RegisterYesYesYesYes
Model CardsYesYesYesYes
CSV exportYesYesYesYes
Policies viewNoYesYesYes
Policy generationNoLimited generationYesYes
Policy publish and deleteNoNoYesYes
AI analysisLimitedYesYesYes
AI Consultant and chatNoNoYesYes
Reports viewNoYesYesYes
Full report exportNoYesYesYes
Evidence TrackerNoYesYesYes
Findings RegisterNoYesYesYes
Workpaper PacksNoYesYesYes
Audit Trail viewer and exportNoYesYesYes
Control TestingNoNoYesYes
Agentic CISO governanceNoNoYesYes
Gateway policy simulationNoNoYesYes
Production Gateway enforcementNoNoNoYes
Claw production executionNoNoNoYes
BYO runtime credentialsNoNoNoYes
DiscoveryNoNoNoYes

Secure-by-design access: plan entitlements are enforced by the application, not only hidden in the interface. Role permissions and plan access must both allow a capability before it can be used.

Advanced Trial Boost

Free and Standard workspaces can activate a one-time 14-day Advanced Trial Boost when eligible. It unlocks Advanced-level AI Consultant, control testing, Agentic CISO governance, Gateway simulation and the agentic framework suite for evaluation.

  • 50 platform-provided AI Consultant interactions during the boost
  • Step-up MFA is required before activation
  • Enterprise-only production Gateway, Claw execution, BYO runtime credentials and Discovery stay locked
  • Data remains after expiry and the workspace returns to its previous plan
Start free

Which plan should I choose?

Use Free to evaluate the workflow on one active framework. Move to Standard when you need repeatable evidence, reports, workpapers and auditor access. Choose Advanced when you need AI-assisted governance, control testing and agentic simulation. Choose Enterprise when agents need to act through production Gateway and Claw controls.

Discuss the right plan

Security and trust baseline

Gamut is designed around tenant isolation, least privilege and defence in depth. The pricing tier changes what a workspace can do, not the security baseline protecting the workspace.

Tenant isolation

Row-level tenant isolation with fail-closed enforcement.

Identity controls

MFA and step-up MFA for sensitive changes.

Auditability

Full audit trail on state-changing actions.

Dual gating

Role-based access and entitlement checks are both required.

Application hardening

Rate limiting, CSRF protection, CSP and HSTS in production.

Encryption

AES-256-GCM at rest and encryption in transit.