Pricing

You never pay for permission to run it.
You pay for SSO, scale, and the paperwork.

One binary, four tiers. Community runs every tool, imports your whole AWX estate, and produces signed receipts anyone can verify offline: free forever, and not a trial. Pro adds directory sign-in at the price the rest of this market charges for it. Team adds what a second team makes necessary: the full policy engine, PostgreSQL and active-active HA, distributed workers, and audit-ready change registers. Enterprise adds the parts we operate for you. Every license is a signed file the binary checks offline, so nothing ever phones home.

Community

Leave AWX today. Try real governance.

$0forever

Self-hosted, single binary, single-node deployment. No license key.

Not a trial and not a crippled edition. Everything here is complete: no seat cap, no host cap, no expiry, and the proofs are free forever: the audit chain, anchoring, receipts, and the open verifier.
Get started
  • All seven tools: Ansible, Terraform, OpenTofu, Bash, PowerShell, Python, Go
  • One-command importers: AWX, AAP, Tower, Ascender, Semaphore, Rundeck, Jenkins, and crontabs
  • Live host-by-task matrix, balanced splits, fleet memory, and drift detection
  • Drag-and-drop workflow editor, pipelines, schedules, webhooks, notifications
  • Local users with roles, organizations, and teams
  • One approval policy, digest-bound: a held run is approved as the exact content the approver saw
  • The full evidence engine: hash chain, RFC 3161 anchoring, signed per-run receipts, the run dossier, and offline verification with the open verifier
  • Sealed credentials with secrets masking in logs
  • The MCP agent gate: an AI agent gets one operator-bound token and can only propose runs through the same approvals a person faces
  • Advisory AI, read-only; community support on GitHub
Pro

Your directory, on the smallest fleet.

$490per year, flat per org

To 250 hosts, single-node. The same binary, unlocked by a signed license file the product verifies offline.

The tier that exists because directory sign-in should not cost what the rest of this market charges for it. A lapsed license takes nothing: sign-in falls back to local accounts, and your data, evidence, and every Community feature keep working.
Start a 30-day trial Buy Pro

Everything in Community, plus:

  • Directory sign-in: OIDC, SAML, LDAP, and JWT, so accounts come from the directory you already run
  • Five approval policies instead of one, for an estate with more than a single rule worth writing down
Enterprise

Team governs it. Enterprise puts independent people around it.

$50,000and up, per year

Negotiated. Includes Team for the whole organization. The services we operate are scoped and dated on the order form before either of us signs, so what we run for you and for how long is a written agreement rather than a list on a page.

Everything in Team, plus the things that require someone outside your install: an independent witness countersigning your history, custody that keeps a seven-year-old receipt verifiable, and people on the hook on your audit calendar.
Talk to us
  • Hosted witness: an independent party watches your chain feed and countersigns what it saw, the one property an operator cannot self-provide
  • Evidence custody and re-anchoring as timestamp authorities come and go
  • External approver coordination: sign-off from a link, or as a signed file for air-gapped sites, with no access to your install
  • Evidence operations on your audit calendar: the mapped pack assembled and delivered each period
  • Air-gapped deployment assistance, hardened builds, and LTS lines
  • A named engineer and a security questionnaire pack

Where the line sits, in one sentence: the proofs are free and the packaging is paid. Anyone can verify a SwitchTender receipt offline forever, on any tier, because evidence you cannot check is not evidence. What Team buys is the org-scale machinery around it, and what Enterprise buys is independence and custody that by definition cannot come from your own install.

Why the import is one command and the migration costs $25,000. The importer moves your configuration. It reads your AWX export and stands the jobs, projects, credentials, schedules, and inventories up here, and that really is one command. What it does not move is how your organization governs a change: who may approve what, which credentials survive the crossing, how you cut over without a window where neither system is authoritative, and what your auditor accepts as evidence afterward. That is the part that goes wrong, and the Migration Program below is that part done with you.

Before you buy: a purchase is governed by the terms, and the refund policy says what happens if it turns out to be the wrong call. Both are short, and both are written to hold us to the commitments above rather than to reserve rights against you. The Migration Program is a services engagement under its own written agreement.

SwitchTender Migration Program

$25,000fixed price, four milestones, first year of Team included

A founder-led program that moves you off AWX, Semaphore, or Rundeck and into production on SwitchTender, with the change controls you already run and your evidence workflows carried forward. Four milestones, normally about six weeks: discovery and import, environment, governance, cutover and handoff. Your first year of Team at your band is included, so everything wired during the program keeps working after it. Founder-led.

What we promise

Seven commitments, published before we have a single customer, every one enforceable by us alone.

What is free today stays free

The Community tier as published at launch never shrinks. We add paid features; we never move a Community feature behind the key.

A lapsed license takes nothing

Data, evidence, receipts, and every Community feature keep working. Paid features stop. Nothing is deleted, locked, or held for ransom, and dropping to Community needs no restart.

No phone-home, no seat counting, no audits

The license is a signed file the binary verifies offline. Fleet bands are self-reported, and we will never ask to check.

Every receipt verifies without us, forever

The verifier is open source, the format is published with conformance vectors, and a receipt issued this year verifies in ten, whether KordLoom exists or not.

Your price is fixed for the term

And you hear about any change at least 60 days before renewal, not on the invoice.

Every release converts to Apache 2.0

Two years after it ships, automatically, under BSL 1.1. The escape hatch is in the license text, not in our goodwill.

Flat per org within a band

Never per seat, never per run. A controller gets more valuable as more people route work through it, and we refuse to price against adoption.

Questions

Which tier do I need?

Community, until somebody else has to sign in. The week you need directory sign-in, more than one approval policy, PostgreSQL behind more than one controller, workers reaching fleets a single machine cannot, or a change register an auditor will actually read, that is Team. Enterprise is for when the proof has to come from outside your own install: an independent witness countersigning your history, custody that outlives your own retention, and people on the hook on your audit calendar. Most organizations should start on Community and let the gate tell them when they have outgrown it.

Can I move from AWX?

Yes, on Community, in one command, and the same goes for Semaphore, Rundeck, Jenkins freestyle jobs, and plain crontabs. AAP, Tower, and Ascender share the AWX export format. For a large or regulated move, the Migration Program does it for you. Start with the switching guide.

I started on SQLite. How do I get to Postgres and HA?

Team includes Postgres. Today the supported move is switchtender backup and restore, which carries your configuration: projects, templates, inventories, credential shells, schedules, and tokens. Run history and the audit chain stay with the SQLite file, and that is not a loss: the old database remains readable and its evidence verifiable forever, because receipts never depend on where the data lives now. If you want the history physically merged, tell us and we will do the move with you.

How do I buy or trial today?

Email hello@switchtender.com with your org name and band. A signed 30-day trial license usually lands within hours, no card. Buying works the same way with an invoice until card checkout ships. Enterprise starts with a conversation.

Do you count my hosts?

No. Bands are self-reported at purchase, the binary counts nothing and reports nothing, and we will never ask to audit. If your fleet grows past your band, we trust you to move up at renewal, and that trust is priced in.

What happens when a license lapses?

Paid features stop; nothing else changes. Your data, your evidence, your receipts, and every Community feature keep working, the running server drops to Community without a restart, and a database you initialized on PostgreSQL stays fully usable forever. We built the gate so that it cannot hold your data hostage even if we wanted it to.

Why is the change register paid when receipts are free?

Because proofs and packaging are different things. Anyone must be able to verify what your install did, on any tier, forever, or the evidence story is worthless, so the chain, anchors, receipts, dossiers, and verifier are all Community. The period change register is the assembled compliance deliverable an auditor consumes, and assembling deliverables is a thing organizations pay for.

What does the license allow?

SwitchTender is source-available under BSL 1.1. You can read the source, modify it, self-host it, and run it in production for your own organization. The restriction is offering it as a competing hosted service. Each release converts to Apache 2.0 two years after it ships. See the LICENSE for the exact terms.

What exactly is the license file?

A small signed JSON document. The binary carries our public key and verifies the signature offline; nothing is fetched, ever. Install it with switchtender license install, see where you stand with switchtender license status. No license server, no activation, no phone-home, and losing internet changes nothing.

What happens to paid features if you disappear?

Your license keeps verifying, because verification is offline, so everything works through the end of your term, and nothing you produced is ever lost: Community, your data, and your receipts work forever, and the open verifier does not depend on us. Each release also converts to Apache 2.0 two years after it ships, so the code itself outlives the company.

Leave AWX on Community. License Team the week the org grows into it.

One binary either way, and the proofs are free forever. Team is an email and a signed file away; Enterprise is a conversation. If you need off AWX in a hurry, the Migration Program starts this week.