One edition. Start free.
$3.50 per human identity and $0.50 per non-human identity, per month. Start with a 30-day free trial of Professional Edition, no card. Full coverage of every identity and every surface from day one.
Professional Edition
Full coverageFull coverage for serious least-privilege.
Billed monthly in arrears, exclusive of tax. The 10-Day Rule and group exclusion apply.
- All surfaces, all data
- Hourly sync
- API access
- Custom role export (ARM / Bicep / Terraform)
- Full reports (PDF, CSV)
- Priority email support
- 30-day free trial included
No card required. After 30 days, subscribe to keep full coverage.
How the trial works
One edition, one path to full CIEM coverage for your Microsoft Cloud identities.
Start a 30-day free trial
Connect a tenant with read-only consent. Full coverage of every human and non-human identity, no card.
Subscribe to keep coverage
After 30 days, subscribe to keep full coverage. Metered monthly in arrears at the rates above — you only pay for identities you actually run.
Or get it comped
Need it without billing? An admin can grant your account comped access with no subscription required.
How are identities counted?
Billing counts human identities (members, guests, named admins) at $3.50 per month and non-human identities (service principals, managed identities, app registrations, agents) at $0.50 per month. Groups are never counted. Microsoft first-party service principals are excluded.
What is the 10-Day Rule?
An identity is billed for a month only if it was enabled on at least 10 calendar days that month. An identity disabled for 10 days or more in a month is not counted, so short-lived and decommissioned identities do not inflate the bill.
What does the trial include?
The 30-day trial unlocks full Professional coverage with no card, up to 500 human and 2,500 non-human identities. After 30 days, subscribe to keep full coverage.
Estimate your monthly cost
$3.50 per human identity, $0.50 per non-human identity, per month. Drag or type to model your tenant.
Members, guests, named admins
Service principals, managed identities, app registrations, agents
Estimated monthly cost
$600.00
per month, exclusive of tax
- 100 human × $3.50
- $350.00
- 500 non-human × $0.50
- $250.00
- 10-Day Rule. An identity is billed for a month only if it was enabled on at least 10 calendar days that month. Identities disabled for 10 days or more are not counted.
- Groups are never counted. Microsoft first-party service principals are excluded.
- Billed monthly in arrears. Stripe Tax adds local VAT or GST at checkout.
What Professional includes
Coverage scope, retention window, and API access are what determine whether Permafrost fits your programme, not just the price. Every capability below is live from day one of the trial.
| Capability | Professional EditionFull coverage |
|---|---|
| Identity coverage | All identities |
| Principal cap | All principals |
| Sync cadence | Hourly |
| Privileged sign-in ingest | Full |
| Non-privileged sign-in ingest | Available |
| Directory audit ingest | Curated + privileged-target |
| Aggregate dashboard tiles | Full |
| Retention window | 30 days+ |
| IR backfill (operator-mediated) | 30-day window |
| Raw-event export | CSV |
| Right-sized role export | Included |
| API access | Included |
| Support | Priority email |
| Card required | Not during trial |