Exciting News: IronCore Labs Named a Gartner® Cool Vendor in Data Security 2025

SaaS Shield pricing

Supercharge your data protection. Start free.

Free Trial

$0 /mo

Kick the tires to get a feel for things with one FREE tenant.

  • Per Tenant Encryption
  • All SDKs Included
  • Tenant Security Proxy

Pro

$1,954 /mo

Plus $25 per tenant for up to 100 tenants

  • Standard Support
  • Real-time Audit Trails
  • Key Leasing
  • Customer-held Keys

Enterprise

Contact us

Advanced features, contract clauses, and support for larger businesses.

  • Enterprise Support
  • SLAs
  • White Labeling
  • Vendor API Bridge

Startup Program

For select products, we offer two years of free encryption services to qualified early-stage startups who want to protect their data right from the start.

Features Comparison

Choose the plan that is best for you

Free Trial

$0 /mo

Kick the tires to get a feel for things with one FREE tenant.

Contact us
Pricing
FeatureIncluded
Base priceFree
Price per tenantFree
Max tenants1
Features
FeatureIncluded
First tenant free Yes
Multi-tenant support No
Key leasing option No
SupportCommunity & Docs
Customer-held Keys No
CMK for Amazon S3 No
Cloaked Search No
Cloaked AI No
Real-time Audit Trails No
Real-time Security Audit No
SLAs No
On-prem Option No
White Labeling No
B2C Discount No

Pro

$1954 /mo

Plus $25 per tenant for up to 100 tenants

Contact us
Pricing
FeatureIncluded
Base price$1,954
Price per tenant$25
Max tenants100
Features
FeatureIncluded
First tenant free Yes
Multi-tenant support Yes
Key leasing option Yes
SupportEmail
Customer-held Keys Yes
CMK for Amazon S3 Yes
Cloaked Search+$10/tenant
Cloaked AI+$10/tenant
Real-time Audit Trails No
Real-time Security Audit No
SLAs No
On-prem Option No
White Labeling No
B2C DiscountLet's talk

Enterprise

Contact us

Advanced features, contract clauses, and support for larger businesses.

Contact us
Pricing
FeatureIncluded
Base priceAsk us
Price per tenantAsk us
Max tenantsUnlimited
Features
FeatureIncluded
First tenant free Yes
Multi-tenant support Yes
Key leasing option Yes
Support24/7 Phone
Customer-held Keys Yes
CMK for Amazon S3 Yes
Cloaked Search Yes
Cloaked AI Yes
Real-time Audit Trails Yes
Real-time Security Audit Yes
SLAs Yes
On-prem Option Yes
White Labeling Yes
B2C Discount Yes

Add-ons

Layer in other products as needed

Our CMK for Amazon S3 product integrates with SaaS Shield and with AWS S3 in a transparent way so you can add multi-tenant data protection with remote keys and optional customer-held encryption keys to objects stored in S3 without any code change. See the CMK for Amazon S3 pricing section for more details.

Our Cloaked Search product integrates with SaaS Shield to allow you to use your text-based sensitive data while keeping it encrypted even while it is in use. Cloaked Search can run standalone and in that configuration has its own pricing, but when paired with SaaS Shield it is charged at an additional $10 per tenant.

Our Cloaked AI product integrates with SaaS Shield to allow you to use your vector embeddings and other vector database data while keeping it encrypted even while it is in use. Cloaked AI can also run standalone. That configuration has its own pricing, but when paired with SaaS Shield it is charged at an additional $10 per tenant.

FAQs

Common questions about SaaS Shield and our plans

Can I try SaaS Shield for free?
You can get a free trial of SaaS Shield CMK for Amazon S3. Just head to the Amazon Marketplace. The first tenant is free for life. Free trials of the SaaS Shield SDK will be available soon. Contact us.
What is a tenant?
SaaS applications that serve multiple customers use a multi-tenant architecture. Each tenant is a customer. SaaS Shield is a multi-tenant data security solution, so you will often hear us talking about tenants and customers interchangeably.
What if I have thousands of tenants?
SaaS businesses have a rainbow of business models, and we're flexible. While customer managed keys might not make sense for each tenant if you have thousands, we've worked with customers to add our application layer encryption across the board and then offer CMK to select customers. Contact us to discuss your unique needs.
What payment options do you accept?
Stripe is our go-to for small subscriptions, which means credit cards. Larger subscriptions are invoiced.
What will support include at the different subscription levels?
We have an extensive doc site for free trial users. Pro users receive unlimited business hours support. Enterprise+ users receive white glove 24/7 support.
What is CMK?
Customer Managed Keys, or CMK, is a cloud architecture pattern that gives customers control and ownership of the encryption keys that protect some or all of their data stored in SaaS applications. It also provides customers with an independent audit of data access. CMK is a trust-but-verify model. Data is encrypted and decrypted on the server-side. The SaaS provider is able to access data, but the customer has control over encryption keys.
What is application-layer security?
In a CMK architecture, encryption is performed at the application layer, not the data layer, and data is encrypted using per-tenant keys managed by either the customer or the vendor.
Where can I get more technical questions answered?
Our doc site is a good place to start.
Can I use Cloaked Search without SaaS Shield?
Yes! You'll just have to use it with a static secret and derived keys.
How does Cloaked Search pricing work?
Cloaked Search integrates with SaaS Shield as an add-on. When used with SaaS Shield, the pro plan costs the standard monthly base fee, plus $35 per tenant per month (the base per-tenant rate plus the Cloaked Search per-tenant rate).
Can I use Cloaked AI without SaaS Shield?
Yes! Cloaked AI can operate in a standalone mode using keys that you provide.
How does Cloaked AI pricing work?
Cloaked AI integrates with SaaS Shield as an add-on. When used with SaaS Shield, the pro plan costs the standard monthly base fee, plus $35 per tenant per month (the base per-tenant rate plus the Cloaked AI per-tenant rate).