Pricing

Free to run.
Paid to prove it to someone else.

The whole controller is free to self-host, forever, including the tamper-evident hash chain and offline verification. The line gets crossed the moment more than one person is accountable for a change, or someone outside your team needs the evidence. That is what the paid tiers are for. Flat per org, never per seat.

Free

Everything AWX does, in one binary, still maintained.

$0forever

Self-hosted, single binary, no cluster.

Get started
  • Full orchestration: inventory, projects, job templates, schedules, ad hoc runs
  • Single binary with an embedded SQLite store; Postgres and HA when you outgrow it
  • All seven tools: Ansible, Terraform, OpenTofu, Bash, PowerShell, Python, Go
  • SSO login (OIDC and SAML), RBAC, organizations and teams
  • Run approvals and policy gates
  • REST API, webhooks, and per-template notifications
  • Secrets masking in run logs
  • Hash-chain generation, signed export, and local verification, the verify command free forever
  • Community support via GitHub issues
Team

For when more than one person is accountable for a change.

$250–500/ mo

Flat per org. No per-seat bill.

Talk to us Early access

Everything in Free, plus:

  • SCIM provisioning and deprovisioning, so leavers lose access the day they leave
  • External approvers who sign off from a link, without a seat or the automation UI
  • N-of-M and required-approver policies per environment or playbook
  • Vault dynamic secrets with lease handling (basic Vault reads will be free)
  • Managed execution environments, built and pinned centrally for the whole fleet
  • Private support channel with a stated response window
Governed

For orgs handing evidence to someone external.

$1,000–2,500/ mo

Flat per org. Migration priced separately.

Talk to us Early access

Everything in Team, plus:

  • Evidence packs mapped to common change-management controls, generated on a schedule
  • Auditor-facing attestation reports; local verification stays free for everyone
  • Audit chain archival and re-anchoring for long retention windows
  • Air-gapped licensing and offline activation
  • AWX migration assistance, priced separately
  • Priority support with a real SLA

All three tiers are published today so nobody prices in the dark. Everything in Free ships now. Team and Governed are being built with founding design partners, and we would rather shape them with the first handful of teams than take a card. If a governed workflow is on your roadmap, tell us what you need and it moves up the build order.

Migration-to-Production Sprint

A fixed-price engagement, not a subscription: we migrate your AWX or Tower install hands-on, validate your real workflows in production, and bundle the first year of Team. One invoice, and you are live before you ever pay again.

Scope it in one call

What stays free, always

Three promises the pricing does not touch, because charging for them would make the product dishonest.

What ships free stays free

Nothing ever moves from free to paid. The paid tiers are built from new capabilities, never carved out of the binary you already run. If we shipped it free, it is yours.

The chain is free because it is the point

Generating the tamper-evident hash chain and verifying it locally is free forever. Gating it would make "provable" a sales gimmick. You pay for evidence packs an auditor accepts, not for the chain existing.

The whole controller is in the free tier

Orchestration, the live matrix, all seven tools, SSO, RBAC, approvals, Postgres, the chain, offline verify. The paid tiers add governance for many people and evidence for outside auditors. They do not hold the good parts hostage.

Questions

Is it really free, or free-until-you-need-it?

Free to self-host with no seat cap, no host cap, and no expiry, and that includes SSO, RBAC, approvals, and Postgres. The paid tiers add capabilities that have never shipped, such as SCIM provisioning, external approvers, and scheduled evidence packs. Nothing moves from free to paid, ever.

What is actually built today?

Everything in the Free column ships in the current release. The Team and Governed capabilities are in development with founding design partners, which is why those tiers say early access and talk to us instead of checkout. Early partners pay as what they need lands, and they set the build order.

Why flat per org instead of per seat?

A controller gets more valuable the more people route work through it. Charging per seat punishes exactly the adoption you want. One org, one flat price, however many operators.

What does the license allow?

SwitchTender is source-available under BSL 1.1. You can read the source, modify it, self-host it, and run it in production for your own organization, free, forever. The only restriction is offering it as a competing hosted service. Each release converts to Apache 2.0 after four years. See the LICENSE for the exact terms.

Can I move from AWX?

Yes. Your AWX export imports in one command on the free tier. For a large or regulated migration, Governed includes hands-on assistance, priced separately. Start with the switching guide.

How do I actually buy Team or Governed?

Email [email protected]. Early on this is founder-led on purpose: we would rather understand your governance needs and get the fit right than sell you a plan you outgrow in a month.

Start free. Upgrade when the stakes do.

Run the whole controller from one binary today. Bring us in when a second person, or an outside auditor, enters the picture.

Get started Live demo Talk to us