Pricing

Priced for the whole team, not per anxious decision.

Access management vendors have spent twenty years charging more for the secure option. We think that gets the incentives exactly backwards, so we don't do it.

Shared

Everything the product does, on infrastructure we run and keep patched.

$499 / month

Billed monthly

Shared hardware — highly available, monitored, patched
SSO included — Entra, Okta, Google
1,000 emails per month, or bring your own SMTP credentials
10,000 packages delivered, revoked and audited
Audit records retained 60 days
Every directory integration, no feature gates

Join Waitlist

Dedicated

Your own stack. Nothing shared with anyone else, at any layer.

$1,999 / month

Billed monthly

Dedicated web, app, database and storage
SSO included — Entra, Okta, Google
100,000 emails per month, or bring your own SMTP credentials
Unlimited packages delivered, revoked and audited
Hardware upgrades and customisations available
Isolation you can point an auditor at

Join Waitlist

Host Your Own

Runs inside your own boundary, on your own infrastructure.

Let's talk

Annual support agreement

Deployed in your cloud, your VPC, your rules
SSO included — naturally
Your SMTP, your data residency, your retention policy
Unlimited everything — it's your hardware
Sits inside your existing audit boundary
Support and upgrade agreement priced per engagement

Contact Sales

What you get on every plan

The differences between tiers are about isolation and scale. They are not about whether you're allowed to be secure.

	Shared	Dedicated	Host Your Own
Single sign-on (Entra, Okta, Google)	✓	✓	✓
Time-bound access with automatic revocation	✓	✓	✓
Approval workflows	✓	✓	✓
Full audit trail of every action	✓	✓	✓
Tenant credentials encrypted at rest	✓	✓	✓
On-premises agent for private systems	✓	✓	✓
Bring your own SMTP	✓	✓	✓
Dedicated infrastructure	—	✓	✓
Runs inside your own audit boundary	—	—	✓

What customers say

Layout preview. These are illustrative examples, not real customers — TemprBac is pre-launch. They are here to show how the section will look once there are genuine quotes to put in it.

Example

“We went from a two-day turnaround on access requests to about ninety seconds. The part I didn't expect was the quiet — the queue those tickets used to sit in is just empty now.”

Illustrative examplePlatform lead, mid-size fintech

Example

“Our last access review took three weeks and a lot of spreadsheets. This one took an afternoon, because the answer to 'who has what and why' was already written down.”

Illustrative exampleHead of IT, healthcare SaaS

Example

“SSO being included is why we shortlisted them. Every other vendor wanted a tier upgrade for the thing our security team required us to have.”

Illustrative exampleSecurity engineer, logistics

Questions we get asked

Is SSO really included on the cheapest plan?

Yes. Entra, Okta and Google on every tier, at no extra cost. Putting single sign-on behind an upgrade means charging a premium for the configuration your security team already requires, and we'd rather not build a business on that.

What counts as a "package delivered"?

One grant of access to one person — provisioned into your directory, tracked, and revoked when its window closes. Revocation and the audit record are part of the same unit, not a separate charge.

What happens if we exceed the email allowance?

Nothing breaks. You can connect your own SMTP credentials on any tier and send through your own domain, which most teams prefer anyway — approval emails then come from an address their people already recognise.

Can we move between tiers?

Yes, in both directions. Dedicated is the same product on isolated infrastructure, so moving is a migration rather than a re-implementation.

Do you have SOC 2?

Not yet, and we won't imply otherwise. If you need TemprBac inside a certified boundary today, Host Your Own puts it inside yours. We're happy to walk through our controls in detail.