readtheplan

Pricing

Simple, transparent pricing

Start with the free OSS toolchain. Upgrade when your team needs managed compliance workflows, policy governance, and audit-ready reports.

OSS

Free

Local-first toolchain for individual engineers and small teams.

  • CLI plan analyzer
  • GitHub Action integration
  • Local MCP tool
  • SOC 2 / ISO 27001 / HIPAA catalogs
  • Signed evidence artifacts
  • Community support

Managed

$499/month

Managed platform for compliance teams shipping infrastructure weekly.

  • Everything in OSS
  • Team workspaces (orgs, projects)
  • Policy governance dashboard
  • Evidence history & timeline
  • Compliance reports (PDF/JSON)
  • Onboarding & policy tuning
  • Email support (24h SLA)

Enterprise

Custom

For regulated environments with strict data-boundary requirements.

  • Everything in Managed
  • Private connector (on-prem)
  • SSO (SAML/OIDC)
  • Role-based access control
  • Audit log retention
  • Custom compliance frameworks
  • Dedicated support & SLA

Talk to us about Managed or Enterprise ->

FAQ

Do I need to upload Terraform plans?
No. readtheplan is local-first by design. Raw Terraform plan JSON never leaves your machine. The managed platform only stores metadata: org/project info, policy profiles, and full signed evidence envelopes. Evidence envelopes are typically 2–5 KB (risk analysis output + compliance mappings + signature) — not raw Terraform plans.
Can I switch from OSS to Managed later?
Yes. The OSS CLI and Managed platform share the same rules engine and compliance catalog. Migration is a one-time setup: connect your CLI, configure your org policies, and you're running.
What's the difference between Managed and Enterprise?
Enterprise adds a private connector that runs entirely within your infrastructure — no data leaves your network. It also includes SSO, custom compliance frameworks, and dedicated support with a negotiated SLA.
Is there a free trial for Managed?
We offer a 14-day pilot with onboarding support. Email [email protected] to get started.
Which compliance frameworks are supported?
SOC 2, ISO 27001, and HIPAA are built-in. Enterprise customers can request custom framework mappings (FedRAMP, PCI DSS, GDPR, etc.).