Open core.
Pay for the platform.
The Rust proxy is free forever under Apache 2.0 — full detection pipeline, deterministic pseudonymization, MCP server, and the open verifier CLI included. You pay when you want anchoring, auditor packs, agent-hop & conduct policy, unmask RBAC, and regulatory packs: the things that make CloakPipe production-ready for regulated industries.
Start free on your own infrastructure. Move to managed cloud when you want a dashboard, hosted anchoring, and an auditor pack. Add agent-hop & conduct policy, unmask RBAC, and regulatory packs when you sell into regulated industries. Everything above Community is the commercial platform.
- Rust proxy & CLI
- Full detection pipeline — Privacy Filter, GLiNER2, regex/checksum
- Deterministic pseudonymization
- MCP server
- Streaming SSE rehydration
- Open verifier CLI — free forever
- Self-host: Docker, K8s, air-gapped
- Community support
- Everything in Community
- Managed cloud hosting
- Web dashboard & metrics
- API key management
- 250K API calls
- Hosted anchoring · auditor pack · 30 day retention
- Email support · SOC 2 report on request
- Everything in Pro
- Agent-hop & conduct policy (Cedar) · unmask RBAC
- RBI pack (+FPC conduct) · DPDP pack
- SSO · SAML / OIDC
- Custom entity types
- HIPAA BAA available
- 2M API calls
- 99.9% SLA · priority support
- Everything in Growth
- VPC / on-prem / air-gapped
- Customer-managed KMS · qualified-TSA anchoring
- CBAC + custom policies
- Compliance dashboards
- Unlimited calls · 99.99% SLA
- Dedicated TAM · annual pen-test
- Embedded integration
- White-label option
- Per-request or flat licensing
- Co-marketing
- Dedicated engineering support
The detection pipeline, vault, and pseudonymization are open and free. The managed platform, policy enforcement, identity, compliance, and SLA are what you pay for. Every capability, mapped to every tier.
The free tier is not a trial. Detection and pseudonymization are commoditized and open — the proxy, CLI, vault, and MCP server are Apache 2.0 forever, and self-hosters can run them air-gapped at $0/GB. Paid tiers add managed operations and the governance layer regulated buyers require.
Open source is not a discount. It is how trust infrastructure earns its way into the stack — auditable, forkable, and free to run — while the managed platform funds the engineering behind it.
The open-source proxy is distribution. Detection is already free — OpenAI, Google, Microsoft, and the open-source community commoditized PII detection long ago. The hard problem was never finding sensitive data; it is building the complete trust infrastructure around it. So we give the proxy, the detection pipeline, and reversible pseudonymization away under Apache 2.0. Developers self-host, evaluate, fork, and embed it without a sales call.
The managed platform is revenue. Self-hosters get full detection and pseudonymization for free — and the open verifier CLI, because "verify it yourself" only works if the verifier is unencumbered. Paying customers get anchoring, auditor packs, agent-hop & conduct policy, unmask RBAC, and support that make CloakPipe production-ready for healthcare, legal, finance, insurance, and government — the part that closes enterprise deals.
A proven model
This is the open-core model proven by Redis, Supabase, GitLab, and HashiCorp: an open foundation drives adoption and earns trust; a commercial layer of hosting, governance, and compliance generates the revenue. The open core is honest open source, not a crippled teaser — and the platform is worth paying for because it solves the operational and regulatory problems that open source alone cannot.
Pricing you can read
Enterprise data-security vendors hide behind opaque custom quotes. CloakPipe publishes its pricing, ships a free tier, and offers a self-host option that costs nothing per gigabyte. You always know what you would pay before you talk to anyone.
Straight answers on what is free, what is paid, how we treat your data, and how calls are counted. Anything else, email us directly.
Is the proxy really free?
Yes — free forever, Apache 2.0. The Rust proxy and CLI, the full tiered detection pipeline (OpenAI Privacy Filter, GLiNER2-PII, and regex/checksum validators), deterministic pseudonymization, the encrypted vault primitives, and the MCP server are all open source. You can self-host on Docker, Kubernetes, or fully air-gapped with no license and no per-call fee. There is no usage cap on the community tier when you run it yourself.
Do you train on my data?
No. CloakPipe never trains on your prompts, responses, or vault contents. Detection runs locally on your infrastructure — no data leaves your perimeter to be detected. On managed cloud, data is processed in-transit only and the real values live exclusively in your encrypted vault. The evidence ledger records entity types and actions, never raw sensitive values, so it's safe to anchor externally and hand to an auditor.
Self-host vs managed — which should I pick?
Self-host (Community) if you want full control of infrastructure and keys, an air-gapped environment, or zero per-gigabyte cost. Choose managed (Pro and up) when you would rather not operate the service yourself and want a hosted dashboard, hosted anchoring, and API key management. The same Rust binary, detection pipeline, and vault encryption run in both — managed simply adds operations, governance, and support on top.
Is a HIPAA BAA available?
Yes, starting on the Growth tier and included on Enterprise. CloakPipe provides encryption at rest and in transit, access controls, and a verifiable evidence ledger, and gives healthcare AI companies exportable evidence that PHI is pseudonymized before it reaches any third-party model — supporting the HIPAA de-identification safe harbor. Enterprise adds VPC, on-prem, or air-gapped deployment and customer-managed KMS for the strictest environments.
What counts as an API call?
One API call is one request that passes through the managed proxy — typically one prompt forwarded to an LLM provider and rehydrated on the way back. Streaming responses count as a single call regardless of how many SSE chunks are rehydrated. Async batch and directory scans are metered separately; talk to us if your workload is scan-heavy. Self-hosted Community usage is never metered.
Can CloakPipe embed into our own gateway or product?
Yes — that is the Platform tier. CloakPipe is designed to embed into AI gateways and model routers as middleware: one integration protects every downstream model call for all of your users. It includes a white-label option, per-request or flat licensing, co-marketing, and dedicated engineering support. Reach out at hello@rohan.sh.