PricingSecurity
GitHub
Pricing

Free while you watch your agents. Paid when they work without you.

Memnox on your machine governs the agent, free with no account. Memnox Cloud governs the team around it, and Pro and Team start with 14 days free and no card.

On every plan, and never switched off over billing

  • Allow, ask or deny on what your agents do, once you switch on enforce
  • Questions answered from your phone, your computer, Slack, Discord or Teams
  • Checkpoints and rewind before the first write
  • A log of every decision and who answered it, hash chained in Memnox Cloud
  • Any tool you use, connected as yourself by voice, from the console, your computer or your phone, and acting in it still asks for Touch ID or Face ID
01

Free

Watch. One person trying the workspace: what your agents do and what was said around them, on one graph.

$0/month
  • Connect every tool you use, as yourself, with no limit
  • See how much of what your agents do is actually under your rules
  • Every message, file and meeting on one map, with who said what
  • Sensitive topics reach only the people cleared for them
  • 3 AI agents governed at once
  • 1 computer they run on
  • 1 person
  • Shared team memory from 3 sources, such as Slack or GitHub
  • Remembers the last 3 months
  • Your past messages imported when you connect a source
02

Pro

Step away. Your agents keep working on every computer you have, on servers and in CI, under the same rules, and the record is read for you.

$19/month

Everything in Free, plus

  • 25 AI agents governed at once
  • As many computers as you have
  • Shared team memory from every source you have
  • Remembers the last 6 months
  • Reads your systems for decisions you approve: 60 extraction runs a month
  • 1 hour of meeting recording a month, then by the hour
  • Agents on servers and in CI held to the same rules, through the guard library or the MCP gateway
  • Reads on its own as things arrive, so nobody has to remember to ask
  • Two things that said something alike are joined up for you
  • More agents any time, added to the plan
  • Extra recording hours any time, by the hour or as a monthly pack
Try free for 14 days

No card. Back to Free after 14 days unless you choose to pay.

Most Popular
03

Team

Delegate. From 5 people. Someone else can answer for an agent, a rule needs a second person to go live, and two machines share one repository.

$18/person/month

from 5 people, $90/month to start

Everything in Pro, plus

  • 25 AI agents governed at once per person
  • As many people as you buy seats for
  • Remembers the last year
  • Reads your systems for decisions you approve: 40 extraction runs a month per person
  • 1 hour of meeting recording a month per person, then by the hour
  • Two machines in one repository take turns on a file instead of overwriting it
  • Every agent decision, answer and rule change streamed to Splunk, Datadog or S3
  • Invites, roles, and one review queue the whole team answers
  • With a second admin, a new rule set goes live only once somebody other than its author approves it
  • Extra recording hours any time, by the hour or as a monthly pack
Try free for 14 days

No card. Back to Free after 14 days unless you choose to pay. The trial covers 5 people.

On your machine

Memnox knows this session.

  • Free
  • Apache-2.0
  • No account
  • No network

Installed once with one command, then it lives inside your agent session rather than a second terminal. It starts in observe, recording what it would have stopped, until you switch on enforce, and it keeps enforcing when Memnox Cloud is unreachable.

$ npm i -g memnox && memnox setup
  • Every agent, MCP server, CLI and credential on the machine, and what each agent reaches
  • Allow, ask a person, or deny, in the agent's own prompt, on its tools, shell commands, MCP calls and file edits
  • The boundary and your past decisions told to the agent before it acts
  • A first time, a secret followed by a push, or an injected instruction, noticed and asked about
  • Checkpoints before the first write, and why, replay and rewind as tools the agent can call
  • A daemon that keeps new agents and servers behind the gate, and the memnox CLI for the rest

Compare plans

What is comparedFreeProTeam
AI agents governed at once32525 per person
Computers1UnlimitedUnlimited
People1 person1 personAs many as you buy
Sources in shared team memory3UnlimitedUnlimited
Your own apps, connected as youAny tool, unlimitedAny tool, unlimitedAny tool, unlimited
History remembered3 months6 months1 year
Decision reading, in extraction runs a month6040 per person
Meeting recording, in hours a month11 per person
Your past messages imported when you connect a source
Agents on servers and in CI held to the same rules, through the guard library or the MCP gateway
Reads on its own as things arrive, so nobody has to remember to ask
Two things that said something alike are joined up for you
Two machines in one repository take turns on a file instead of overwriting it
Every agent decision, answer and rule change streamed to Splunk, Datadog or S3
Allow, ask or deny on what your agents do, once you switch on enforce
Questions answered from your phone, your computer, Slack, Discord or Teams
Checkpoints and rewind before the first write
A log of every decision and who answered it, hash chained in Memnox Cloud

Open source under Apache-2.0, so the gate is never behind a price.