Self-hosted. Annual. No per-token tax.
DFENS is licensed per deployment, not per request. Because it runs on your hardware and inspects your traffic locally, your bill doesn't scale with your token spend. Free for design partners during early access.
For teams willing to deploy against real traffic and shape the product with us.
- Full engine, all provider adapters
- Hands-on deployment support
- Rule tuning against your traffic
- Direct line to engineering
- Locked-in early-partner pricing at GA
Production deployment for a single application or environment.
- All five provider adapters
- Full deterministic rule engine + default rule packs
- Signed & sequenced audit log
- Optional encrypted history (S3-compatible)
- Signed container images (SBOM + SLSA + cosign)
- Business-hours support, rule-pack updates
Multi-tenant, regulated, or high-scale deployments with procurement requirements.
- Everything in Team, plus:
- Multi-tenant rule scoping & per-tenant admin
- ML operators (
:fatimage: PI classifier, toxicity) - Priority SLA & named engineer
- Custom rule authoring & onboarding
- Security questionnaire, DPA, procurement support
* Indicative early-access pricing to establish structure; final figures are confirmed per deployment based on environments, scale, and support level. Nothing on this page is a binding quote.
The security floor doesn't move with the price.
▸Self-hosted
Runs entirely on your infrastructure. Your prompts never leave your network, on any tier.
▸Readable rules
Every block names a rule ID with a citation and severity. No opaque scores, on any tier.
▸OWASP-mapped detection
The same deterministic engine and default rule packs, mapped to the LLM Top 10.
▸Self-defense
ReDoS analysis, per-rule panic isolation, DoS budget: the firewall protects itself.
The questions procurement always asks.
Why per-environment and not per-token?
DFENS inspects traffic locally on your hardware; we have no visibility into your token volume, and take no cut of it. Licensing per deployment keeps your cost predictable as usage grows.
Do you see our prompts?
No. There are no outbound calls to Integrated AI or any third party for scoring. That's architectural, not a policy promise. The container has nowhere to phone home to.
What counts as an "environment"?
A distinct deployment boundary: typically one production install fronting one application or model gateway. Non-production (staging, CI) instances are included with a production licence.
Is there an open-source or free tier?
DFENS is a commercial, proprietary product. Early access is free for design partners; there is no perpetual free tier. The rule format is a documented, portable spec.
How do updates work?
Paid tiers receive signed image updates and new rule packs as attacks evolve. You choose when to roll them; nothing auto-updates inside your boundary.
Can we start on Team and move to Enterprise?
Yes. Multi-tenancy, ML operators, and priority support are the usual triggers to move up. Design-partner pricing carries over to whichever tier you land on at GA.
Tell us about your deployment.
Share your providers, your scale, and whether it's customer-facing or internal, and we'll come back with a deployment plan and a firm figure, usually within one business day.
hello@integratedai.co.uk