Kiken is self-hosted in your cloud account. Findings and evidence stay in your infrastructure, with evidence images in private storage behind short-lived links.
MENU
PRICING
Priced per endpoint. Tracers included.
Every plan includes both mechanisms — discovery scanning and tracer documents — because early warning shouldn’t be an add-on.
PILOT
Free
during early access
For proving value on a real fleet segment.
Up to 25 endpoints
Unlimited discovery scans
50 active tracer documents
Dashboard alerts and notifications
Community support
GROWTH
$185
per endpoint / month · early-access pricing
For running a real detection program.
Up to 500 endpoints
Everything in Pilot, plus:
Unlimited tracers and custom patterns
Outbound webhooks → your SIEM/SOAR
Role-based access and Google SSO
Priority support
Limit 1 Scan/Track Data: 500/gb/mo (over goes to pass through at 20% markup)
Limit 2: 25 traced documents/canaries per month
Enterprise
Custom
annual, by agreement
For fleets and requirements that need a conversation.
Unlimited endpoints
Everything in Growth, plus:
Deployment and rollout assistance
Security-review support for your assessment
Roadmap input — cloud connectors, SAML/SCIM
Invoicing and procurement-friendly terms
Fair questions
Asked before you had to.
Every plan includes both mechanisms — discovery scanning and tracer documents — because early warning shouldn’t be an add-on.
Does Kiken block exfiltration?
No — and we won’t pretend otherwise. Kiken detects and alerts, then routes the signal into the response workflow you already run. It complements DLP and CASB; it doesn’t replace them.
Do tracers really work outside our network?
Yes — that’s the point. A tracer fires when the document is opened online, from any machine, managed or not. You get IP, User-Agent, and timestamp.
What about files in SharePoint, Box, or OneDrive?
Covered today when they sync to a managed device. Native cloud connectors are on the roadmap — and clearly labeled as such.
How does billing work?
Growth is a monthly per-endpoint subscription billed through Stripe — card payment, self-serve, cancel anytime. Enterprise is annual with invoicing.
Where does our data live?
Seed your first tracer this week.
A pilot takes one installer and one planted document. You’ll know it works the first time something opens a file it shouldn’t have.
Copyright © 2026 Kiken Security C Corp - All Rights Reserved.
PRICING
Priced per endpoint. Tracers included.
Every plan includes both mechanisms — discovery scanning and tracer documents — because early warning shouldn’t be an add-on.
PILOT
Free
during early access
For proving value on a real fleet segment.
Up to 25 endpoints
Unlimited discovery scans
50 active tracer documents
Dashboard alerts and notifications
Community support
GROWTH
$185
per endpoint / month · early-access pricing
For running a real detection program.
Up to 500 endpoints
Everything in Pilot, plus:
Unlimited tracers and custom patterns
Outbound webhooks → your SIEM/SOAR
Role-based access and Google SSO
Priority support
Limit 1 Scan/Track Data: 500/gb/mo (over goes to pass through at 20% markup)
Limit 2: 25 traced documents/canaries per month
Enterprise
Custom
annual, by agreement
For fleets and requirements that need a
conversation.
Unlimited endpoints
Everything in Growth, plus:
Deployment and rollout assistance
Security-review support for your
assessment
Roadmap input — cloud connectors, SAML/SCIM
Invoicing and procurement-friendly
terms
Fair questions
Asked before you had to.
Every plan includes both mechanisms — discovery scanning and tracer documents — because early warning shouldn’t be an add-on.
Does Kiken block exfiltration?
No — and we won’t pretend otherwise. Kiken detects and alerts, then routes the signal into the response workflow you already run. It complements DLP and CASB; it doesn’t replace them.
Do tracers really work outside our network?
Yes — that’s the point. A tracer fires when the document is opened online, from any machine, managed or not. You get IP, User-Agent, and timestamp.
What about files in SharePoint, Box, or OneDrive?
Covered today when they sync to a managed device. Native cloud connectors are on the roadmap — and clearly labeled as such.
How does billing work?
Growth is a monthly per-endpoint subscription billed through Stripe — card payment, self-serve, cancel anytime. Enterprise is annual with invoicing.
Where does our data live?
Kiken is self-hosted in your cloud account. Findings and evidence stay in your infrastructure, with evidence images in private storage behind short-lived links.
Seed your first tracer this week.
A pilot takes one installer and one planted document. You’ll know it works the first time something opens a file it shouldn’t have.
Copyright © 2026 Kiken Security C Corp - All Rights Reserved.