WitnessOS
Pricing

Priced so you can start without a meeting

The open-source tools are free and always will be. Work that carries our time and our judgement is priced below, so you can qualify us before you talk to us. Prices are in Australian dollars and exclude GST.

Ways in

Three ways to engage

01

Self-serve

Evaluate and verify on your own machine, today.

Free
no sign-up, no account
  • Interactive simulation in your browser
  • Evidence bundle verifier (E0 to E4)
  • MCP declared-versus-observed validator
  • Passport issuance and offline verification
  • Signed releases with SBOM and checksums
03

Enterprise

For regulated estates and multi-team rollouts.

from $90,000
annual programme, scoped per estate
  • Dedicated or on-premises deployment
  • Custom policy and identity integrations
  • Independent verification runs and retention custody
  • Named support with response windows
  • Evidence packs for auditors and regulators
Services

Work you can buy on its own

No engine deployment required. Each of these produces an artifact you keep, and each is priced from a number you can see before you contact us.

Evidence-grade assessment

from $7,500

We appraise what your existing records can actually support, grade each one on the E0 to E4 ladder, and hand you the gap list with the evidence behind every grade.

Per system.

Declared versus observed audit

from $15,000

We compare what your MCP servers and agents declare against what they do at runtime, and deliver a tamper-evident ledger whose head you keep.

Up to ten servers or agents.

Conformance mapping

from $5,000

We map your record format onto the E0 to E4 ladder and show exactly which rung each field supports, including the rungs your format cannot reach.

Per record format.

Adapter build

from $12,500

We wire your existing substrate, such as a log store, gateway or identity provider, into evidence-grade records with published conformance vectors.

Per substrate.

Managed verification

from $2,500 / month

We run independent verification over your evidence bundles on a schedule and hold retention custody so the retention claim is somebody else's, not yours.

Includes a monthly signed report.

Support retainer

from $1,500 / month

Named response windows, CVE and dependency notifications for the tools you run, and a standing channel to the engineering team.

Optional, monthly, cancellable.

Before you buy

What a fee does not buy

  • No compliance certificate. We produce evidence and grades. We do not certify you, and a grade is not a legal opinion.
  • No legal advice. Mapping your obligations is your counsel's call, not ours, and we say so in writing.
  • No outcome guarantee. A record cannot prove an outcome happened. E3 records a claim about a response, and we tell you which grade you actually hold.
  • No hidden access. Deployment is self-hosted. Your keys stay in your infrastructure and nothing calls home.

If a proposal does not name a number, ask for one. That is a rule we hold ourselves to, and it applies in reverse: if a number here does not fit your scope, tell us and we will price the scope you actually have.

FAQ

Frequently asked questions

What does WitnessOS do?
WitnessOS is a runtime governance layer for autonomous agents. Every agent action is evaluated against policy before execution and produces a cryptographic receipt with an evidence grade from E0 to E4 (Anchored), where E4 uses RFC 3161 external timestamps that remain verifiable offline.
Is there a free way to evaluate it?
Yes. The interactive simulation at demo.html runs entirely in your browser with sample data, no sign-up and no install. The verifier, the MCP validator and the passport are free and open source, and you can run them against your own artifacts today.
Why are some prices a range?
Because scope moves the number and we would rather show you the floor than hide it. The starting figure covers a defined scope; anything beyond it is quoted in writing before work starts. Nothing begins on an open-ended estimate.
Do the open-source tools feed data back to you?
No. The verifier runs with no gateway, no credentials and no network. The MCP validator is standard library only. Nothing phones home, and there is no telemetry to disable.
How do I get access to the gateway engine?
The gateway engine is proprietary and released through our design-partner programme under NDA. Request access and we will schedule a short intro call to understand your deployment and use case.
Can I self-host WitnessOS?
Yes. The gateway is designed to run on your own infrastructure, fully self-hosted with no data egress, and is deployed that way with design partners today. Encryption keys are generated and stored on your infrastructure.
What connectors are available now?
Gmail dispatch for human-in-the-loop approvals and Stripe payment processing are live today. Additional email, messaging and financial-system connectors are on the roadmap and ship through the design-partner programme.
What is your patent status?
Patent pending covers our runtime guardrail methodology for autonomous AI agents. The patent protects our implementation, not your data; your audit trails, policies and agent configurations remain your intellectual property.
Get started

Start with the simulation

Evaluate governed agent action in your browser today, then talk to us about the engine or a scoped engagement.