Open pricing
No sales call required.
Kairos is priced by token volume. Calculate your cost in seconds. Every feature is included — no feature walls, no per-module upsells. Start free — forever — without talking to anyone.
How you can start
Three clear options — free forever, full trial, or paid by volume. All features included at every tier.
- Sherlock monitoring on 1 network
- 100K governed tokens / month
- Every feature included
- Unlimited Sherlock networks & scanners
- 250K tokens, full enterprise access
- Drops to the free plan — never cut off
- Effective rate drops as you commit more
- Unlimited Sherlock, annual saves 20%
- No sales call — subscribe self-serve
Token pricing calculator
Slide to your monthly token volume. Price appears instantly — all features included.
Volume pricing — starts at $2.00/1M and your effective rate drops the more you commit.
We'll pre-fill checkout with 50M tokens/mo. No credit card to start. Switch to annual (−20%) anytime.
— All platform features included — routing, compression, compliance, DLP, agents, war room, RL feedback.
— Volume pricing: the more tokens you commit, the lower your effective per-1M rate.
— Kairos compresses context by >=25%, reducing tokens sent to your LLM provider on every call.
— Annual prepay applies an automatic discount across the full year.
— You're saving 24% vs the $2.00/1M entry rate at this volume.
Illustrative compression math — at 50M tokens/mo
This demo assumes a 25% cut to input tokens and a fixed model mix. Context compression is designed to cut input tokens. Dollar savings vary by workload and model mix. Not a customer result.
Illustrative product UI. Not a customer result. Assumes a 25% input-token cut, a 70% input / 30% output split, and model prices as of 2026-Q1. The compressor does not guarantee that cut. Dollar savings vary by workload and model mix.
Everything included — at every tier
Govern first, then prove it, then treat compression and routing as a possible reduction in provider spend. Context compression is designed to cut input tokens. Dollar savings vary by workload and model mix.
Control mappings
EU AI Act, NIST AI RMF, and OWASP LLM Top 10 are mappings evaluated when enabled. Not a certification.
Intent Firewall
Semantic checks can run before the model call when those rules are enabled
DLP and strip proofs
Built-in detectors plus custom rules. Strip proofs are tamper-evident records, auto-purged after 4 hours.
SHA-256 audit records
Successful non-streaming gateway calls are hash-chained. Export JSON, or print the audit-proof view to PDF.
Routing
Route across the models you already pay for, including the 100+ models in the catalog.
Context compression
Designed to cut input tokens. Dollar savings vary by workload and model mix. Not a guaranteed percentage.
Human-in-the-Loop review
Route high-stakes or flagged requests to human reviewers before they reach the model
War Room + RL Feedback
Explore dry-run scenarios as estimates before anyone changes production. Export human corrections as JSONL training data for fine-tuning
Not sure how many tokens you need?
Answer 3 quick questions and we'll estimate your monthly usage and apply it to the calculator above.
1/3 — How many users will make AI requests?
Flight Simulator
HideSee an estimate before you change anything live
Upload a usage file and see an estimate of what would change under sample scenarios. These numbers are estimates, not a bill. They do not change production policy.
Flight Simulator
HideEstimates only. Upload usage metadata (model, tokens, provider), not prompts or secrets.
CSV or JSON. Metadata fields only. Prompt columns are discarded.
Questions? [email protected] — no sales call required.
Full pricing details →Everything included. No exceptions.
Feature access is never carved into upsell tiers. Your subscription is based on usage — not on which features you need.
AI Gateway & Routing
OpenAI-Compatible API
Drop-in replacement — change your base URL, keep your SDK. Supports streaming, function calling, and tool use.
Intelligent Model Routing
Keyword, regex, semantic intent, and cost-optimized rules route every request to the right model automatically.
Semantic Intent Routing
Intent-based routing understands the purpose of a request and selects the best model — beyond simple keyword matching.
100+ AI Models Supported
GPT-4o, Claude 3.5, Gemini, Llama, Mistral, DeepSeek, and every major provider — routed intelligently.
BYOK — Bring Your Own Keys
Use your own provider API keys. Kairos routes through them, enforcing your cost and compliance policy.
Custom Model Endpoints
Register custom or fine-tuned models alongside commercial providers and route between them on the same rules.
Context Compression
≥25% Context Reduction
Kairos compresses conversation context before sending to any LLM — reducing token spend without degrading quality.
Auto & Manual Modes
Auto mode adapts compression level based on model, query complexity, and governance context. Manual gives full control.
Extractive Compression
Scores segments by query relevance, structural weight, and entity density — keeping the highest-signal content.
Compression Proof
Every compression decision is explained — which segments were kept, dropped, and why — in a human-readable proof.
Per-Agent Compression
Compression is configured per agent and applied to every message — trimming token spend on each call.
AI/LLM Compliance & Governance
22 Compliance Framework Mappings
NIST AI RMF, EU AI Act, OWASP LLM Top 10, CMMC, FedRAMP-oriented mappings, ISO/IEC 42001, UNESCO AI Ethics, and more. Availability is not certification.
Control-Level Status
Runtime-capable enabled controls can block, redact, or log on governed paths; manual and external/legal controls are identified separately.
Per-Control Configuration
Enable or disable individual controls per framework, per API key. Fine-grained governance without all-or-nothing tradeoffs.
Tamper-Evident Audit Trail
Successful gateway request logs are SHA-256 hash-chained per organization and Command Center. Verification detects chain inconsistencies; this is not immutable storage.
Human-in-the-Loop (HITL)
Route high-stakes requests to human review before they reach the LLM. Configurable per mandate or request type.
Compliance Readiness Score
Aggregate score showing how well your deployment aligns with enabled frameworks — updated in real time.
Board-Ready Exports
One-click CSV/JSON compliance reports pre-mapped to all active frameworks — ready for third-party auditors.
Auto-Updating Controls
All 22 mandates reviewed against authoritative sources every 90 days. Controls update when regulations change.
DLP & Data Protection
152+ PII Types Detected
SSN, MRN, DOB, credit cards, IBANs, passport numbers, driver's licenses, biometric identifiers, and more.
Pre-LLM Redaction
PII is stripped before context leaves your perimeter — the model never sees sensitive data.
DLP Strip Proof
Per-call proof of exactly what was redacted — with the original and redacted versions available for audit.
Custom DLP Rules
Define your own pattern-matching or regex rules on top of the built-in PII library.
Secure Document Analysis
Upload documents for AI analysis — PII is stripped, mandates highlighted, and the response returned on clean data.
Agents
Default Chat Agent
Connect your AI provider API keys and start chatting in seconds — smart routing and compression on from the first message.
Custom Agent Builder
Pick allowed models, routing rules, intent firewall, DLP, compliance frameworks, MCP servers, and HITL — in a clean UI or conversationally with Build As You Go.
Projects with Persistent Context
Workspaces with personalization instructions, accumulated context, and documents. Swap agents in and out — every chat carries the project’s context.
Model Routing + Compression Per Agent
Every agent routes each ask to the cheapest capable model across your linked providers and compresses context on every message.
MCP Server Integration
Model Context Protocol Gateway
Connect any MCP server to your agents with health monitoring, auth, and scoped access controls.
Zero-Trust Tool Allow-Lists
Agents access only explicitly authorized MCP tools — no implicit trust, full auditability of every tool call.
Custom MCP Functions
Register HTTP-backed custom functions as MCP tools — tested, versioned, and policy-gated in one place.
Health Monitoring
Real-time health status for every connected MCP server with configurable alerts.
Agent Identity & Security
Reusable Agents Across Chat, Projects & Jobs
Save an agent once and reuse it everywhere — in Chat, in Projects, and in Automated Jobs — with spend and token limits enforced via its Kairos API key.
Semantic Intent Firewall
Evaluates the purpose of every interaction to detect prompt injection, jailbreaks, and privilege escalation.
Hard Budget Enforcement
Set dollar caps per API key, agent, or team. Requests are blocked — not just alerted — when limits are hit.
Per-Agent Token Limits
Assign token budgets per agent to prevent runaway autonomous loops from generating unexpected costs.
Situational Risk Guardrails
Context-sensitive enforcement based on requester role, intent, and timing. Anomalous requests get flagged in real time.
Pre-Production & Simulation
War Room Parity
Execute deterministic policy scenarios against the Kairos controls configured for an agent or job before deployment.
Pass-Rate Analytics
Compare expected and actual policy decisions with executed and extrapolated scenario counts shown separately.
Execution Boundary
Current parity mode does not call providers or measure model quality, latency, or live-provider cost.
Regression Testing
Run simulations against historical "golden" datasets to detect regressions when agent config changes.
Governance & Feedback
Governance-to-RL Feedback
Human corrections on flagged responses are structured as JSONL training data — ready for fine-tuning.
HITL Review Queue
Review non-compliant interactions, add corrected outputs, and export as structured RL training datasets.
Policy-to-Proof Audit
Every policy check is packaged with the specific context, evidence used, and controls passed — legal-grade record.
Decision Audit Trails
Immutable record of every routing, compression, governance, and DLP decision — per request, per call.
Observability & Cost Intelligence
Real-Time Cost Dashboard
Per-model cost breakdown, compression savings overlay, latency trends, and projected monthly spend.
Request Log with Compression Proof
Every request logged with full compression proof, compliance results, DLP events, and routing trace.
Trust & Geopolitical Overview
CISO/CIO executive dashboard: compliance posture score, model distribution, geolocation of requests.
CSV Export
Export usage, cost, and compliance data to CSV for finance teams and external auditors.
Cost Savings Attribution
Every dollar saved through compression and routing is attributed and displayed — broken down per day.
Sherlock — Shadow AI Discovery
Shadow-AI Network Scanner
A lightweight scanner agent in the Kairos CLI detects traffic to known AI/LLM endpoints — OpenAI, Anthropic, Gemini, Mistral, Perplexity, DeepSeek, xAI, and more.
Unlimited on Paid Plans
Sherlock is included with every paid subscription — continuous monitoring across unlimited networks and scanners.
Unlimited During Trial
Sherlock is fully unlimited for your 14-day trial — monitor as many networks and scanners as you like while you evaluate.
Free Forever on 1 Network
After your trial, continuous Sherlock monitoring keeps running on 1 network with up to 2 scanners — free, forever.
1 Free Scan — No Signup
Enter your email and run one free scan without creating an account. See what's on your network in minutes.
Shadow-AI Cost Estimation
Byte volume is converted to estimated tokens and priced with a representative model per provider — unknown AI usage shows up in Usage & Cost.
Per-Network & Per-Device Attribution
Usage is attributed to the specific WiFi/LAN and device IP, with geolocation. Ignore or delete any network's costs.
Metadata-Only & Privacy-Respecting
Sherlock classifies by destination endpoint and byte volume. It never decrypts traffic or reads message contents.
Enforcement Coverage
Gateway rules cover Kairos-routed calls. Managed hosts-file rules cover that endpoint; DNS/firewall coverage requires your connector to consume the domain feed.
Enterprise & Access Control
Command Center RBAC
Hierarchical workspaces with scoped privileges, sub-organization isolation, and per-unit usage limits.
SSO / SAML
Enterprise identity provider integration for seamless team onboarding and centralized access management.
API Key Management
Create scoped API keys with granular permissions, budget limits, and per-key audit log panels.
Team Seats & Roles
Owner, admin, member, and viewer roles with feature-level access control per command center.
Private VPC / On-Premises
Deploy Kairos inside your own private VPC or on-premise environment, isolated to your infrastructure.
Custom SLA & MSA
Enterprise agreements with configurable SLAs, BAAs for HIPAA environments, and custom procurement.
Common questions
Does Kairos replace my AI provider?
No — Kairos integrates with your existing provider relationships. You bring your own API keys. Kairos routes intelligently between them, compresses context to reduce your bill, and enforces compliance on every call. Your providers stay the same; Kairos makes them work smarter.
What is token-metered pricing?
You pay based on the volume of tokens that flow through Kairos each month. There are no feature gates — every capability is included regardless of token volume. The price per million tokens decreases at scale.
Is there a free trial?
Yes. Every new account starts with a full-access Enterprise trial — 14 days or 250,000 tokens, whichever comes first. No credit card required. Sherlock is unlimited for the whole trial.
What happens when my trial ends?
You drop to the free plan automatically — you're never cut off. The free plan is free forever and includes 100K governed tokens per month, continuous Sherlock shadow-AI monitoring on 1 network with up to 2 scanners, and every platform feature. Upgrade whenever you need more volume.
What's the minimum paid commitment?
Paid plans start at a 5M-token monthly commitment with a $19/mo platform minimum. Rates are graduated — $2.00 per 1M tokens for the first 10M, falling to $0.50 per 1M at 500M–1.5B — so your effective rate drops as you commit more.
Can I pay annually?
Yes. Annual prepayment receives an automatic 20% discount. If your usage exceeds your prepaid volume, you can purchase additional tokens at your per-token rate directly in the platform.
What if my usage is unpredictable month to month?
Kairos tracks your usage and can recommend a renewal contract once a stable pattern is established. Until then, monthly billing keeps you flexible.
Do I need to talk to a salesperson?
No. You can calculate your price, start a trial, and subscribe entirely self-serve. Enterprise teams that need security review, custom procurement, or a guided demo can email [email protected] — but it's never required.
Need enterprise procurement support?
Self-serve is always the default. If your team needs security review, legal/MSA, a custom BAA, or a guided walkthrough, reach out to [email protected]. No SDR call required.