Simple, transparent pricing

One flat monthly fee covers every phishing email your team processes. No per-email charges. No hidden costs. Cancel anytime.

✓ 2 months free on annual
Solo
One organisation. One reporting mailbox. Everything you need to close the feedback loop without analyst overhead.
$29 /mo
 
Starter
Small teams · 1–50 users
For MSPs onboarding their first clients, or businesses with multiple departments or sites.
$49 /mo
 
Pro
MSPs & multi-client
For MSPs who want reports delivered under their own brand. White-label branding, high volume, full control.
$199 /mo
 
Enterprise
Unlimited scale for large MSPs and MSSPs. No per-mailbox or per-analysis caps.
$499 /mo
 

Frequently asked questions

How long does setup take?

Your API key is issued immediately after checkout. Point Sentinel at your reporting mailbox, drop in the key, and your first analysis typically arrives within a few minutes. Most deployments are fully operational in under two minutes.

Does email content leave our environment?

No. All analysis runs inside your own deployment — on your server, in your Docker container. Email content, headers, and attachments are never transmitted to Ephemeral Sentinel or any third party. The engine is fully deterministic and requires no external API calls.

Does this replace our existing security tools?

No — it complements them. Ephemeral Sentinel is purpose-built to close the loop on reported phishing emails: the ones your users flag and currently receive no response for. It works alongside your SEG, mail filtering, and SIEM rather than replacing any of them.

Which mail environments are supported?

Microsoft 365 (Graph API or IMAP), Google Workspace (Gmail API or IMAP), Exchange On-Prem (IMAP), and any standards-compliant IMAP server. Inbound polling and outbound report delivery both support all three transport methods.

Can this be white-labelled for our clients?

Yes. Pro and Enterprise tiers include white-label branding: custom product name, logo, accent colour, and report footer text. Reports arrive from your brand, not ours.

What happens if I cancel?

Access ends at the end of your current billing period — no surprise charges. Your data stays in your deployment and is never held by us. There is no lock-in, no export fee, and no deletion timeline imposed on your end.

Not sure? Most organizations start with Growth.

All plans include: local processing (no email content leaves your server), deterministic rules engine, IMAP / M365 / Gmail integration, API access, and email support.

Reporting mailboxes = the dedicated inboxes where your users' phishing reports arrive (one per client or department). Each mailbox Sentinel polls counts toward your plan limit.

Already subscribed? Go to your dashboard →

Questions? Email us or read how it works.