Plans
Protection, priced plainly.
The shield is open source and runs on your machine. Paid plans add up-to-date, model-specific protection through the API, built by our own attack research and testing: we hunt for new attacks, try them against the models you use, and turn the ones that get through into new rules.
Trial and plans
The trial
Coming soonYour first megatoken is on us.
No time limit. No card. Personal’s hosted protection until the hosted service has judged 1,000,000 tokens for you. Local judging never counts. A megatoken is a million tokens, about four million characters; a gigatoken is a billion, a teratoken a trillion.
Quis ut Deus(open source)Coming soon
Self-hosted, on your own hardware
$0forever
Free and open source
The shield: one binary and its integrations, free. No account.
- Secret and personal-data protection, restored in replies
- General injection and poisoning checks
- Judged locally; works offline
PersonalComing soon
I want to protect myself
$9/month
billed monthly
$99/year
saves $9 a year
100 megatokens a month, fair use
Up-to-date, model-specific protection through the API.
- Everything in Quis ut Deus
- Model-specific rule packs from our own attack research
- Hybrid mode, the console and verdict history
TeamComing soon
I want to protect my team
$99/month
billed monthly
$999/year
saves $189 a year
1 gigatoken a month, fair use
One business account. Invite everyone.
- Everything in Personal
- Unlimited member invites, not per seat
- Shared policies and team observability
PlatformComing soon
I want to protect my users
$999/month
billed monthly
$9,999/year
saves $1,989 a year
100 gigatokens a month, fair use
Need teratokens? Larger volumes by contract.Your application's users' prompts, judged at the gate.
- Everything in Team
- The license to send third-party traffic
- API keys at scale
Fair use. Each paid plan includes hosted processing every month: 100 megatokens on Personal, 1 gigatoken on Team and 100 gigatokens on Platform. If you outgrow it, the costly hosted extras pause until your next billing cycle, and the rules engine keeps judging every prompt — you are never unprotected. We tell you at 80% and again at 100%.
Side by side
Compare plans.
| Feature | Quis ut Deusopen sourceFree | Personal$9/mo · $99/yr | Team$99/mo · $999/yr | Platform$999/mo · $9,999/yr |
|---|---|---|---|---|
| On your machine | ||||
| Judged locally, works offline | ✓ | ✓ | ✓ | ✓ |
| Secrets and personal data obfuscated, restored in replies | ✓ | ✓ | ✓ | ✓ |
| General injection and poisoning checks | ✓ | ✓ | ✓ | ✓ |
| Account required | No | Yes | Yes | Yes |
| Through the API | ||||
| Hosted judging API (REST and streaming)Coming soon | — | ✓ | ✓ | ✓ |
| Up-to-date, model-specific protection from our attack researchComing soon | — | ✓ | ✓ | ✓ |
| Hybrid mode: judged locally, then by the APIComing soon | — | ✓ | ✓ | ✓ |
| Hosted processing a month, fair useComing soon | — | 100 megatokens | 1 gigatoken | 100 gigatokens |
| The console | ||||
| Playground, policies and verdict history | — | ✓ | ✓ | ✓ |
| Policy sync across devices | — | ✓ | ✓ | ✓ |
| Optional classifier, when it ships | — | ✓ | ✓ | ✓ |
| Members | — | Just you | Unlimited invites | Unlimited invites |
| Shared policies and team observability | — | — | ✓ | ✓ |
| License | ||||
| Use the hosted service for a business | — | — | ✓ | ✓ |
| Send third-party traffic (your users' prompts) | — | — | — | ✓ |
| API keys at scale | — | — | — | ✓ |
Questions
Asked plainly, answered plainly.
What runs on my machine?
The judging. Quis ut Deus, the open-source shield, carries the engine with its baseline rules, so every prompt is judged locally, offline, before it leaves your machine, on every plan including the free one.
Paid plans add the hosted API. With hybrid mode, secrets and personal data are obfuscated on your machine first, so the hosted service only ever sees placeholders.
What does the trial include? Coming soon
Personal's hosted features (the API, model-specific protection, the console) until the hosted service has processed 1,000,000 tokens for your account. There is no time limit and no card.
Tokens are counted with a fixed estimate of about four characters per token, whatever model you use. Local judging never counts. One trial per verified email address.
What happens when the trial runs out? Coming soon
Hosted processing pauses until you choose a plan. Local judging carries on, and the console stays readable. We tell you at 80% and again at 100%.
What does fair use mean?
Each paid plan includes hosted processing every month: 100 megatokens on Personal, 1 gigatoken on Team and 100 gigatokens on Platform. If you outgrow it, the costly hosted extras pause until your next billing cycle, and the rules engine keeps judging every prompt — you are never unprotected. We tell you at 80% and again at 100%.
Local judging costs us nothing and is never metered.
How does billing work?
Through Stripe. You pay at Stripe Checkout, where sales tax and VAT are worked out for your location, and you manage your plan and invoices in the Stripe customer portal. Annual plans are billed once a year.
Can I use Personal for work?
Personal protects you. Using the hosted service for a business needs Team, and sending your own users’ prompts through it needs Platform. Quis ut Deus, the open-source edition, is yours to run on your own hardware.
Do you see my prompts?
Not when they are judged locally. When you use the hosted API, each prompt is judged in memory and never stored, under any setting. We keep metadata only, such as the verdict and the signals that fired, and obfuscation maps are never stored or logged anywhere.