Skip to content

Plans & Pricing

Clarion is a security observability platform that combines runtime protection, vulnerability management, threat intelligence, and AI-powered security advisory — all in one.

Plans overview

StarterGrowthScaleEnterprise
Price$99/mo$499/mo$1,999/moCustom
Events per second1,0005,00025,000100,000
Agents525100500
Data retention7 days30 days90 days1 year
Storage5 GB50 GB250 GB1 TB
Users310UnlimitedUnlimited

Annual billing saves 20% on all plans.

What's included in every plan

Clarion Agent Runtime — Real-time kernel-level monitoring of process execution, file access, and network activity. Deploy in minutes.

Vulnerability Scanner — Continuous CVE matching against NVD and OSV. CVSS scoring prioritized by exploitability.

Threat Intelligence (CTI) — Curated threat feeds with automatic IOC matching against your live telemetry.

Alert LLM Analysis — AI-powered alert triage that explains what happened, why it matters, and what to do next.

StarterGrowthScaleEnterprise
Alert analyses10/mo50/moUnlimitedUnlimited

vCISO — AI Security Advisor — An AI-powered virtual CISO that understands your environment, compliance posture, and risk profile.

StarterGrowthScaleEnterprise
vCISO credits500/mo2,500/mo10,000/mo50,000/mo

Credits are consumed based on interaction complexity. Unused credits reset monthly. Need more? Contact us for volume pricing.

Growth and above

Cloud Security Posture Management — Connect AWS, GCP, or Azure accounts for continuous infrastructure scanning.

  • 200+ built-in security checks
  • Multi-cloud support (AWS, GCP, Azure)
  • Automatic remediation guidance
  • Drift detection

Scale and above

Compliance Automation — Continuous monitoring against industry frameworks. Stay audit-ready year-round.

Supported frameworks: SOC 2 Type II, ISO 27001, CIS Benchmarks, NIST 800-53, PCI DSS, HIPAA.

Risk Management — Quantify and track security risks across your organization with live telemetry integration.

  • Real-time risk scoring tied to compliance controls
  • Treatment tracking and accountability
  • Board-ready reports
  • ISO 27005 / ISO 31000 aligned lifecycle

Enterprise

Everything in Scale, plus:

SIEM Integration — Forward enriched events to Splunk, Sentinel, Elastic, or QRadar with pre-built field mapping and deduplication.

Dedicated Infrastructure — Dedicated ClickHouse cluster, custom data retention, SLA with guaranteed uptime, named account manager.

Custom Integrations — SCIM provisioning, custom webhooks, on-premises agent deployment support.

Feature comparison

FeatureStarterGrowthScaleEnterprise
Clarion Agent Runtime
Vulnerability Scanner
Threat Intelligence
Alert LLM Analysis10/mo50/moUnlimitedUnlimited
vCISO Credits500/mo2,500/mo10,000/mo50,000/mo
Cloud Security
Compliance
Risk Management
SIEM Integration
SSO / SAMLSSO
Dedicated Infra
SupportCommunityEmailPriorityNamed AM

FAQ

Q: What is an agent?

A: A Clarion Agent is a lightweight process that runs on each monitored host (server, VM, or container node). One agent per host.

Q: What counts as an event?

A: Every process execution, file access, or network connection observed by the Clarion Agent counts as one event. EPS is measured as a rolling 1-minute average.

Q: What happens if I exceed my plan limits?

A: You'll receive a warning at 80% utilization. At 100%, events are still collected but may be sampled. No data is lost — upgrade your plan to restore full fidelity.

Q: What are vCISO credits?

A: vCISO credits are consumed based on the complexity of your interactions with the AI advisor. Credits reset at the start of each billing cycle. Contact us if you need additional capacity.

Q: Can I switch plans at any time?

A: Yes. Upgrades take effect immediately. Downgrades take effect at the next billing cycle.

Q: Is there a free trial?

A: Yes. 14-day free trial on the Growth plan, no credit card required.

Q: Do you offer annual billing?

A: Yes. Annual billing saves 20% on all plans. Enterprise pricing is always custom.

Contact sales@clarion.io for Enterprise pricing or to start your free trial.

Clarion Security Observability Platform