Starter
$
299
/mo
For teams automating their first workflows.
- ✓Up to 3 workflows
- ✓Phishing Email Triage + Suspicious Login + Malware Hash
- ✓1,000 runs / month
- ✓Email support
- ✓Community YAML library
MOST POPULAR
Team
$
599
/mo
For SOC teams that need the full workflow suite.
- ✓Up to 10 workflows
- ✓All 5 live demos incl. Phishing URL Reputation
- ✓10,000 runs / month
- ✓Slack + PagerDuty webhooks
- ✓Priority email support
- ✓Custom workflow uploads via /workflows/build
Business
$
999
/mo
For mature security teams with complex IR chains.
- ✓Unlimited workflows
- ✓Full library incl. Ransomware Containment IR chain
- ✓100,000 runs / month
- ✓SSO + audit log export
- ✓Dedicated onboarding
Common questions
One execution of any workflow from start to finish — regardless of how many steps it contains. A 13-step Ransomware IR chain counts as 1 run. Partial executions that fail before completing also count.
Yes. Cancel from Stripe's customer portal at any time — no penalty, no notice period. Your access continues until the end of the billing period you've already paid for.
If CipherRun fails to execute your workflows due to a platform-side issue, we'll credit you for the affected period. Email us at hello@polsia.app with details. We don't issue refunds for partial-month cancellations.
Runs over your monthly limit are queued rather than dropped. We'll contact you to upgrade your plan before the next billing cycle. Your data is never lost.
Custom YAML workflow uploads via /workflows/build require the Team plan or above. Starter gives you the 3 pre-built workflows from the library.
Every workflow in the library has a live demo you can run right now — for free, no account required. That's our trial. When you're ready to connect your own triggers and data, subscribe.