Start free. Scale when it matters.
10,000 decisions a month are free, with everything you need to protect your first actions. Enterprise adds volume, support and what procurement asks for.
Free
Protecting your first actions
$0 a month, no card
10,000 decisions a month
Includes:
- Browser and server SDKs, and the API
- Observe mode and enforcement
- Per-action policies
- Readable reasons on every decision
- Decision history in the dashboard for 30 days
- Owner, admin and member roles
- Standard rate limits
- Documentation and email support
Enterprise
Many actions, higher volume, procurement
Custom annual contract
Volume sized to your traffic
Everything in Free, plus:
- Higher rate limits, agreed per site
- Guided onboarding on your first action, with a comparison report
- Support for your security review, including a detection walkthrough under NDA
- A named contact and priority support
- Annual contract and invoicing
- Dedicated environment (roadmap)
- SSO (roadmap)
Compare plans
| Feature | Free | Enterprise |
|---|---|---|
| Decisions | Free: 10,000 a month | Enterprise: Sized to your traffic |
| SDKs and API | Free: Included | Enterprise: Included |
| Observe mode and per-action policies | Free: Included | Enterprise: Included |
| Decision history | Free: 30 days | Enterprise: 30 days |
| Audit log | Free: 365 days | Enterprise: 365 days |
| Rate limits | Free: Standard, per site | Enterprise: Agreed with you, per site |
| Onboarding | Free: Self-serve, with the docs | Enterprise: Guided, with a comparison report |
| Support | Free: Email | Enterprise: Named contact, priority |
| Security review | Free: Security overview | Enterprise: Engineer call and detection review under NDA |
| SSO | Free: - | Enterprise: Roadmap |
| Dedicated environment | Free: - | Enterprise: Roadmap |
| Billing | Free: Free, no card | Enterprise: Annual contract, invoiced |
What counts as a decision
A decision is one call from your server to verify or evaluate, whatever the outcome (allow, step up or deny), in either mode. Page views, sessions and background evidence are not counted.
| Example | Counts as |
|---|---|
| 8,000 sign-ups a month, each verified once | 8,000 decisions, within Free |
| 100,000 checkouts a month, each verified once | 100,000 decisions |
| A login page with 2 million visits but 300,000 login attempts | 300,000 decisions |
Rate limits
Every site has per-minute limits to protect you and other customers. If you exceed one, HEIP answers 429 with a Retry-After time. Free uses standard limits; on Enterprise they are agreed with you for your volume.
In every plan
- Observe mode
- Browser and server SDKs
- Domain-locked keys and secret key rotation
- Readable reasons on every decision
- Audit log of every configuration change
- No identity, biometrics or personal data collected
Questions
Do I pay for visitors who never act?
No. Only decisions count: the calls your server makes when someone does something you protect.
Is Free really free?
Yes. No card and no time limit: 10,000 decisions every month, with the same detection Enterprise customers get.
What happens if I go past 10,000 decisions?
We'll get in touch as you get close and talk about moving to Enterprise. We won't switch off protection on your actions without talking to you first.
Do decisions in observe mode count?
Yes, because your server still asks. Watching the page and building evidence are never counted.
Why do you verify accounts, even on Free?
We verify every account, to keep HEIP out of the hands of people who want to test bots against it. Tell us what you want to protect and we'll set up your account.
Can we try HEIP before signing an Enterprise contract?
Yes. Start on Free in observe mode, or ask us for guided onboarding on one action before you sign.
Where can I read about data and security?
On the security page: what HEIP receives, what it never receives, and how long it keeps it.
Trust has to move with the action.
Start free on your first action, or tell us which actions you want to protect and how often they happen, and we'll put together an Enterprise quote.