Pricing
One price, with every feature included
Active Identity Guardian is licensed by the enabled user accounts in your on-premises Active Directory. Entra ID monitoring and Identity Copilot come with every licence.
Annual subscription
£1,099a year
for up to 1,000 enabled users
+ £9 a year for each additional enabled user
- Entra ID monitoring and Identity Copilot included
- No charge per domain controller, server or collector
- Up to 10% growth during the year at no extra cost
- Support and updates for as long as your subscription runs
Prices are in pounds sterling and exclude VAT where applicable.
Work out your price
Enter the number of enabled user accounts in your Active Directory.
a year
Up to 1,000 enabled users is one price.
Everything is included
Every licence comes with the whole product, so there are no modules to add later.
Audit Events
Every Active Directory and Entra ID change captured, with full before/after context.
Exposure Management
148 detection rules across Active Directory and Entra ID, mapped to CIS, MITRE ATT&CK and NIST.
Live Threat Detection
Catches brute-force and password-spray attacks, DCSync and privilege escalation as they happen.
Risk Posture & Scoring
A letter-grade posture score for the whole estate, and exactly why it moved.
Posture Reports
Scheduled and on-demand posture reports, downloadable as audit evidence in one click.
Built-in Reports
50+ ready-to-run report templates, plus your own saved reports.
Entra ID monitoring
Included with every licence. Cloud-only Entra ID accounts are never counted.
Identity Copilot (AI)
Ask your directory in plain English. It runs on your own private Azure AI Foundry model.
Support and updates
Support, bug fixes, security patches and new versions for as long as your subscription runs.
How licensing works
You only pay for the people and service accounts in your on-premises Active Directory.
What counts as an enabled user?
An enabled user account in your on-premises Active Directory, including service accounts and group managed service accounts. Disabled accounts, computers, contacts, trust accounts, krbtgt and the built-in Guest and DefaultAccount accounts don't count.
Do Entra ID accounts count?
No. Entra ID monitoring is included, and cloud-only Entra ID accounts aren't counted. A user synced from Active Directory is counted once, as their Active Directory account.
How do I find my number?
Active Identity Guardian counts your enabled users for you and shows the number in Settings, on the Licence tab. We use the same count at renewal.
What if we grow during the year?
You can go up to 10% over your licensed number at no extra cost. At renewal, your licence is adjusted to your actual count. Growth beyond 10% is charged pro rata for the rest of the term.
Do domain controllers or servers cost extra?
No. Run as many collectors and monitor as many domain controllers as you need. Test, staging and disaster-recovery copies are free too.
What does Identity Copilot cost?
Nothing extra from us. It runs on your own Azure AI Foundry model, so Microsoft bills the AI usage to your Azure subscription.
How does the free evaluation work?
You get 30 days free, with no limit on users, for evaluation rather than production use. Ask us through the contact form and we'll get you set up.
Several forests, or a managed service provider?
Each licence covers one Active Directory forest, and managed service providers need an MSP licence. Talk to us and we'll put together a quote.
See it before you buy
Explore the live demo now, or ask us for a free 30-day evaluation.