OpenWatch pricing
Open core. Free to run, priced to scale.
Start free and self-hosted with the full compliance engine. Move to Enterprise when you need governance, enterprise identity, air-gapped deployment, and support for regulated and federal environments.
Community
Free
Self-hosted OpenWatch for securing your own Linux fleet.
- ✓Self-hosted, open source
- ✓STIG, CIS, and NIST 800-53 coverage
- ✓Scan, remediate, and roll back with Kensa
- ✓Posture dashboard and drift detection
- ✓Author custom rules in YAML
- ✓Community support
Enterprise
Custom
Self-hosted or air-gapped, with governance, identity, and support for regulated and federal environments.
- ✓Everything in Community
- ✓Governance and exception workflows with a full audit trail
- ✓Granular RBAC, SAML, and SCIM
- ✓Long-term evidence retention and auditor packages
- ✓Air-gapped deployment
- ✓Priority support with an SLA
- ✓Engineer-led services available
Compare Community and Enterprise
| Capability | Community (free, self-host) | Enterprise (self-host / air-gap) |
|---|---|---|
| Deployment | Self-hosted, you run it | Self-hosted / dedicated / air-gapped |
| STIG / CIS / NIST 800-53 | Full | Full |
| Kensa scan + remediate + rollback | Full | Full |
| Posture dashboard + drift detection | Included | Included |
| Hosts / fleet | Unlimited (self-host) | Per host, volume |
| Author custom Kensa rules (YAML) | (OSS rules) | + custom frameworks |
| Evidence export | Basic (JSON / CSV) | OSCAL, auditor packages, immutable / WORM |
| Retention / temporal history | Short (30 days) | Configurable / unlimited |
| Governance & exceptions | — | Full workflow with audit trail |
| Users & RBAC | Basic (few roles) | Granular RBAC |
| SSO | — | SAML / SCIM provisioning |
| Continuous monitoring | Included | Included |
| Bulk remediation | — | Included |
| Integrations (SIEM, ticketing, notifications) | — | Full + custom |
| Multi-org / multi-tenant | — | Included |
| Support | Community | Priority with SLA |
| Engineer-led services | — | Add-on |
Not sure which fits? Talk to us and we will help you scope it.