Question 1

What MACAW pricing plans are available?

Accepted Answer

MACAW offers three tiers:

| Feature | Developer (Free) | Team ($99/mo) | Enterprise |
|---------|------------------|---------------|------------|
| Events | 150K / month | 1M / month | Configurable |
| Agents & identities | Unlimited | Unlimited | Unlimited |
| Console users | 3 | 12 | Unlimited |
| Log retention | 14 days | 30 days | 90+ days |
| Deployment | Cloud (AWS) | Cloud (AWS) | Hybrid, multi-cloud |
| IdP | OIDC | Multi-vendor OIDC | SAML/SCIM |
| Support | Community | Priority email

Question 2

Where do I start?

Accepted Answer

Developer tier. It's free forever with full security—policy enforcement, cryptographic signing, hash-chained audit logs.

We believe safety shouldn't be priced. Upgrade when you need more scale or Enterprise deployment options.

Question 3

What counts as an event?

Accepted Answer

Events capture each step in the agent lifecycle: registration, policy checks, decisions, and tool execution. A typical tool call generates 5–10 events—your complete audit trail from request through enforcement.

Think of events as compliance evidence: full visibility into every security decision.

Question 4

What's the difference between console users and agents?

Accepted Answer

Agents are your workloads—unlimited on all tiers. They can be:
- Human users invoking tools via AI assistants
- Long-running services (background workers, scheduled jobs)
- Ephemeral apps (serverless functions, short-lived processes)

Console users are the people managing MACAW itself: setting policies, reviewing logs, approving attestations, and configuring settings. Typically SecOps, platform leads, or compliance teams—not individual developers.

The key distinction: agents are what MACAW secu

Question 5

How do developers get SDK access?

Accepted Answer

Console admins generate SDK downloads via Dev Hub → Quick Start, each with a unique API key. Developers integrate the SDK without needing console access—they just need the SDK package and their API key.

This decouples your development team size from console user limits. A team of 50 developers can each have unique API keys while only 3 console users manage policies.

Benefits:
- Per-developer API keys for usage attribution
- Governance tracking by API key
- No console seat required for SDK inte

Question 6

Are security features limited on lower tiers?

Accepted Answer

No. We believe safety shouldn't be priced. Full security features are included on every tier:

| Feature | Developer | Team | Enterprise |
|---------|-----------|------|------------|
| Policy enforcement | ✓ | ✓ | ✓ |
| Cryptographic signing | ✓ | ✓ | ✓ |
| Hash-chained audit logs | ✓ | ✓ | ✓ |
| Identity propagation | ✓ | ✓ | ✓ |

Higher tiers provide more scale (events, retention, users) and operational features (multi-IdP, SIEM integration, custom backends)—not better security. The core secur

Question 7

What happens if I exceed plan limits?

Accepted Answer

We notify you as you approach limits. If event limits are exceeded, older logs auto-rotate. Security enforcement always continues—we don't price safety.

| Tier | Event Limit Exceeded | User Limit Exceeded |
|------|---------------------|---------------------|
| Developer | Older logs auto-rotate; enforcement continues | Cannot invite more users |
| Team | Add-on: +$10/100K events/mo | Add-on: +$10/user/mo |
| Enterprise | Configurable soft/hard limits | No hard limit |

Question 8

Are there per-event or integration charges?

Accepted Answer

No. Tier-based pricing includes all events—policy decisions, audit logs, and SDK events. Connect as many tools, LLMs, and services as needed. No per-integration fees.

Question 9

Can I upgrade or downgrade?

Accepted Answer

Yes. Upgrades take effect immediately. Downgrades apply at the end of your billing cycle.

To upgrade from Developer to Team:
1. Go to Settings → Billing in the Console
2. Click "Upgrade to Team"
3. Enter payment information (credit card via Stripe)
4. Your limits increase immediately

Enterprise accounts require annual contracts. Contact demo@macawsecurity.com.

Question 10

How does data retention work?

Accepted Answer

| Tier | Retention | Approximate Storage |
|------|-----------|---------------------|
| Developer | 14 days | ~100 MB |
| Team | 30 days | ~1 GB |
| Enterprise | 90+ days, configurable | Custom |

Limits are approximate and subject to change. When limits are reached, older data auto-rotates. Export logs before retention expires if needed.

Question 11

What's included in Enterprise?

Accepted Answer

Enterprise includes everything in Team plus:

Deployment & Scale:
- Configurable event limits and 90+ day retention
- Unlimited console users
- Hybrid deployment (cloud + on-prem)
- Multi-cloud (AWS, Azure, GCP)
- Data residency options

Security & Compliance:
- SAML/SCIM for console SSO
- Bring your own PKI (custom CA certificates)
- HSM / Cloud KMS / HashiCorp Vault integration
- Custom audit backends (CloudWatch, Elasticsearch, Splunk)
- Restrictive mode (explicit specification required)

Man

Question 12

What payment methods are accepted?

Accepted Answer

Credit cards via Stripe. Enterprise accounts: invoicing available.

Question 13

What support is included?

Accepted Answer

| Tier | Support |
|------|---------|
| Developer | Documentation + community |
| Team | Priority email |
| Enterprise | Dedicated support with TAM model + SLA |

Contact us for custom support arrangements.

Pricing & Plans