Connect everything. Revoke anything.
Connections and revocations are unlimited on every plan, including the free one. You are billed only for the identities we monitor, meaning any person or service account whose grants we inventory.
One connection, for evaluating on a real tenant.
- 1 connection
- 25 monitored identities
- 2 team seats
- 7-day history
- Email alerts
- Unlimited revocations
The working plan for a security team of three to ten.
- Unlimited connections
- 500 monitored identities
- 10 team seats
- 1-year history
- Slack and signed webhooks
- API access and SAML SSO
Multi-tenant estates with a compliance obligation.
- Everything in Team
- 2,500 monitored identities
- 25 team seats
- 3-year history
- EU or US data residency
- Audit log export
SIDE BY SIDE
What differs between plans
| Capability | Free | Team | Business |
|---|---|---|---|
| Monitored identities | 25 | 500 | 2,500 |
| Team seats | 2 | 10 | 25 |
| Connections | 1 | Unlimited | Unlimited |
| Revocation | Unlimited | Unlimited | Unlimited |
| History retention | 7 days | 1 year | 3 years |
| Alert channels | Email · Slack · Webhook | Email · Slack · Webhook | |
| Data residency | US | US | EU or US |
| SAML SSO | — | Included | Included |
| Audit log export | — | — | Included |
| Support | Community | One business day | Four hours |
BEFORE YOU CHOOSE
The questions we get asked
What counts as an identity?
Any account holding at least one third-party grant, whether that is a person, a shared mailbox or a service account. Accounts with no grants are free and unlimited.
What happens if we exceed the plan?
Nothing stops. New identities are flagged as unmonitored and we tell you once; scanning and alerting continue on everything already covered.
Can we change plan mid-term?
Up at any time, prorated to the day. Down at the end of the period, with your history retained for the shorter window.
Is there a contract?
Monthly plans are month to month, cancel in the interface. Annual is a twelve-month term. Business includes a DPA and a signed security review.
What happens to our data if we leave?
Provider tokens are deleted within one minute of disconnecting. The inventory is purged on your retention schedule, and you can export the whole thing as CSV first.
Run it inside your own perimeter
Self-hosted OAuthRadar keeps provider tokens on your infrastructure. Priced per deployment, with a support agreement.