Protected repos
Repositories where Control9 is installed and deploy authority is governed.
Pricing
Bill for governed surface area, not developer seats. Unlimited teammates can participate while usage meters the repos, environments, and control events you protect.
How billing works
Protected environments
Targets like production or staging where shadow or enforce mode applies.
Control events
Plan checks, deploy verifications, approvals, and off-path correlations each month.
Paid tiers bill monthly through Stripe. MVP self-service checkout covers Free and Team only.
Tiers
Free
$0
- 1 protected repo
- 100 monthly control events
- Standard-30d retention
- Shadow mode only
- CDK/Terraform classification
Team
$19/month
- 5 protected repos
- 5,000 monthly control events
- Standard-90d retention
- Enforce mode, approvals, deploy verification
- Customer evidence export
Growth
$99/month
- 10 protected repos
- 25,000 monthly control events
- Standard-180d retention
- GitHub plus GitLab breadth (packaging intent)
- CloudTrail correlation (packaging intent)
Contact for Growth onboarding. Self-service checkout is Free and Team only.
Enterprise
Contact
- Negotiated repos and events
- SSO/RBAC (packaging intent)
- Customer-owned storage (packaging intent)
- SIEM export (packaging intent)
- Data residency options (packaging intent)
Managed Controls
Contact
- Negotiated usage
- Alto9-managed policy review
- Exception review and new control authoring
- Shadow-mode reporting advisory
Unlimited team members can participate. Start a team with work email or Google:Sign inorGet started.
Need help mapping tiers?
Start with an assessment or tell us which repos and environments you want to protect first.