Skip to main content
ThornGuard offers two plans today: Individual for personal MCP environments and Enterprise for teams that need broader controls, longer retention, and shared access.
The live pricing section on thorns.qwady.app is the canonical checkout surface. This page summarizes the current tier structure and feature access so you can understand what each plan unlocks.

Plans

IndividualEnterprise
Monthly$19/mo$149/mo
Annual$190/yr$1,490/yr
Who it is forSolo developers securing personal MCP environmentsTeams securing shared agents, tooling, and operations
EnvironmentsUp to 3Up to 30
Default log retention90 days365 days
Rate limit1,000 requests/minuteUnlimited by default (0)
License accessPrimary ThornGuard license keyPrimary license key plus enterprise team tokens

Feature Matrix

CapabilityIndividualEnterprise
Ingress threat scanningYesYes
Egress PII and secret redactionYesYes
DNS-aware SSRF protectionYesYes
Real-time dashboard accessYesYes
Audit log export (CSV / JSON)YesYes
GDPR audit-log deletionYesYes
Custom domain blocklistsNoYes
Custom command blocklistsNoYes
IP whitelistingNoYes
Team management and RBACNoYes
Webhook integrationsNoYes
Approval profiles and approval queueNoYes
Custom redaction packsNoYes

Plan Notes

Individual

Individual is built for personal or low-seat deployments where you want the full ThornGuard proxy, audit, and redaction pipeline without the added complexity of team administration. It includes:
  • the public gateway on thorns.qwady.app
  • the dashboard on thorns.qwady.io
  • real-time audit visibility
  • built-in threat blocking and redaction
  • export and deletion controls for your audit trail

Enterprise

Enterprise unlocks the broader control surface for shared environments and stricter operational requirements. It adds:
  • team tokens with admin and viewer roles
  • higher-scale or unlimited throughput defaults
  • longer default audit retention
  • enterprise-only controls such as IP allowlists and custom blocklists
  • policy rules, webhook integrations, approval workflows, and custom redaction rules

How Licensing Works

  • Your primary credential is a THORN-... license key.
  • Enterprise workspaces can also issue THORN-TEAM-... tokens for scoped team access.
  • ThornGuard determines plan tier automatically from your Polar license metadata.
If you are evaluating shared access or enterprise-only controls, also see Team Management, Policies & Webhooks, and Approvals, Tools & Redaction.

Start a Subscription

Visit the live pricing section on the ThornGuard landing page to choose a plan and complete checkout. View ThornGuard Pricing After subscribing, use the Quickstart Guide to connect your MCP client, then head to the Dashboard to review live traffic and controls.

Manage Your Subscription

Use the customer portal to update billing details or manage your subscription after checkout.