Clearance Incident Response. Free through May 1, 2027, so you have time to patch.Estimate your Blast Radius in 60 secondsEstimate

aviatrix logoAviatrix
Under Active Attack
Aviatrix Clearance · Pricing

Contain the blast radius. Pay per workload.

Pay by the month for the workloads you protect. Choose Outbound Containment, Lateral Containment or both.

Available onAWS Marketplace
Estimate your monthly bill

List prices per covered workload per month, from May 1, 2027. Your first 15 Outbound Containment workloads stay free. Both controls on one workload: $18.

Free tier

Free

See what a compromise could reach today, and get Outbound Containment on your first 15 workloads at no cost.

$0no time limit

Free entitlement

Workload and AI agent inventoryBy VPC and cloud
15 workloads of Outbound ContainmentPer organization
Take the free Containment Assessment

Starts with an AWS Marketplace subscription. Your cloud provider bills the gateways: about $78 per VPC per month on AWS.

Most teams start here

Outbound Containment

Data can't leave for destinations you never approved.

$12per covered workloadper month

After your 15 free workloads

  • NAT replacement, with a second gateway for high availability
  • Outbound policy by domain, tag and SmartGroup
  • Monitor mode first, then enforce
  • Kubernetes workloads on EKS and AKS
Subscribe on AWS
AWS today

Lateral Containment

A compromised workload reaches only what you've allowed, not the rest of your estate.

$6per covered workloadper month

Billed from the first workload

  • Policy between workloads by SmartGroup and tag
  • Monitor mode first, then enforce
  • SSH, RDP and other management ports blocked between workloads
  • AWS only today, through your own Transit Gateway
Subscribe on AWS
250+ or annual commit

Volume

One price model as you grow, with a committed number your finance team can plan around.

Contact sales

Custom pricing

  • Annual commitment: pay for ten months, get twelve
  • Volume tiers as your estate grows
  • Every line, mixed VPC by VPC
  • Add-ons such as intrusion detection and TLS inspection
  • Private offers on AWS Marketplace
Contact sales
No platform fee, no fee per VPC, no charge for traffic volumeUSD, billed monthly on your AWS bill
Getting started
  1. 1
    Subscribe on AWS MarketplaceBefore May 1, 2027, to join the free period.
  2. 2
    Onboard your cloudRegister in the Aviatrix Cloud console and connect your account.
  3. 3
    Start in monitor modeSee what your policy would block. Nothing is blocked yet.
  4. 4
    EnforceAllow what your apps need and deny the rest. Backout is one action.
What you pay for

The unit is a covered workload.

  • Running virtual machine1
  • Kubernetes node (pods are free)1
  • Serverless function or task in a VPC or VNet1 per 25
  • Managed service (database, load balancer, endpoint)0
  • Aviatrix gateways and network appliance VMs0

Counted every 4 hours. Your monthly quantity is the average, rounded up. Stopped VMs do not count.

Estimate your monthly bill
120
40
Outbound: 120 × $12$1,440
Lateral: 40 × $6$240
Free: first 15 Outbound Containment workloads−$180
Per month, from May 1, 2027$1,500

Plus your cloud provider's gateway charges: about $78 per VPC per month on AWS (us-east-1 estimate; check your region).

Assumes the count stays the same all month.

FAQs

Pricing, answered.

  • Your workload and AI agent inventory, plus Outbound Containment on your first 15 workloads per organization, with no time limit. Lateral Containment is billed from the first workload. This is separate from the launch program, which makes every line $0 until May 1, 2027.

  • Yes, they are independent. Lateral Containment is AWS only today, through your own Transit Gateway.

  • Gateways run in your cloud account, so your cloud provider bills them, before and after May 1, 2027: about $78 per VPC per month on AWS at us-east-1 on-demand prices. The default is two small gateways per protected VPC or VNet; one is allowed. They never count as workloads.

  • Aviatrix counts covered workloads every 4 hours from its own inventory. Your monthly quantity is the average, rounded up. With an annual commitment it is never lower than your committed number. Workloads Aviatrix cannot see, such as EKS Fargate or Auto Mode, are billed on your committed count.

  • Charges appear in ABUs (Aviatrix Billing Units) at $0.01 each, so $12 appears as 1,200 ABUs. During the launch program you see 0 ABUs. Azure Marketplace is planned, not live.

  • Subscriptions started on AWS Marketplace before May 1, 2027. Direct sign-ups are not included.

  • No transit or connectivity between VPCs, VNets or clouds, no data-center or office connections, and no insertion of third-party firewalls. Lateral Containment is AWS only. Need one of these, or intrusion detection or TLS inspection? Contact sales.

Prices in USD per covered workload-month. List price from May 1, 2027; $0 before.