Three License Modes · Monthly Pricing Only

Simple, transparent pricing

Flat monthly licenses. No hourly metering. No surprise bills. Pick the mode that fits the buyer.

Mode 1 · Self-Install

Per-Identity License

Anywhere Node.js, Python, or .NET runs. Your domain.
from $72 / core / month

One HexaEight identity bound to one machine you own, under your own domain. Bundle the Bridge SDK in your language; the cryptographic core runs underneath. Monthly or annual billing.

  • Single HexaEight identity, bound to one machine you own.
  • Per-core licensing from $72/month. Larger capacities on request.
  • Bridge SDK in Node.js, Python (preview), and .NET. Same crypto core under all three.
  • Linux, Windows, macOS. Server, laptop, Pi, edge gateway, SBC, automotive, drones.
  • Microcontrollers via .NET nanoFramework (ESP32, STM32, Arduino Portenta).
  • Paired devices (phones, kiosks, glasses, wearables) authenticate via QR hand-off. No SDK on the gadget.
  • Your domain on the identity (e.g. agent01.yourbrand.com). .NET 8 runtime auto-installs.
Buy on HexaEight Store See per-core tiers
Recommended for enterprise
Mode 2 · Marketplace VM

Multi-Identity License

For brand-owning enterprises
from $144 / core / month

One VM hosts unlimited identities under your own domain. You control your own Bridge endpoint. MACC-eligible on Azure.

  • Unlimited cryptographic identities per VM
  • Use your own domain (agent.yourbrand.com)
  • Own Bridge endpoint, own customer relationship
  • Azure Marketplace live · AWS, GCP coming
  • MACC-eligible · counts against committed cloud spend
  • Resell identities at your own price
Volume / enterprise pricing
Mode 3 · Signature

Tamper-Evident Signing

Add to any identity
$99 / identity / month

Sign requests, responses, audit-log entries with a self-contained JWT. Verification is always free, always offline.

  • Add to any identity in Mode 1 or Mode 2
  • Self-contained JWT, embedded verification key
  • Free, offline verification, forever
  • EU AI Act, DPDPA, HIPAA provenance
  • Court-admissible AI records
Buy Signature License
Mode 1 · Per-core tiers

Self-install license, per CPU core count

Match the license to the CPU core count of the machine running your gateway. 32+ cores route to Marketplace VM on Azure.

Cores
Best for
Monthly
1 core
Single agent or compact deployment
$72 /mo
Buy
2 cores
Small swarm or paired workload
$144 /mo
Buy
4 cores Popular
Typical production deployment
$288 /mo
Buy
8 cores
High-throughput agent fleet
$576 /mo
Buy
16 cores
Multi-tenant or HA setup
$1,152 /mo
Buy
32 cores
Enterprise deployment · Azure Marketplace recommended
$2,304 /mo
64 cores
Enterprise · Marketplace VM recommended
$4,608 /mo
128 cores
Enterprise · Marketplace VM recommended
$9,216 /mo
Customers in India: visit store.hexaeight.com for an alternative checkout link.
When to use which mode

Side-by-side comparison

Feature
Mode 1 · Self-Install
Mode 2 · Marketplace
Mode 3 · Signature
Identity model
One identity, machine-bound
Unlimited identities per VM
Add-on to any identity
Domain control
Your hostname
Your domain, your subdomains
Inherited from base identity
Bridge endpoint
Self-operated
You operate, you control
Inherited
Audit-trail signing
Optional via Mode 3
Optional via Mode 3
Yes, tamper-evident JWT
Verification cost
N/A
N/A
Always free, always offline
Cloud Marketplace billing
No
Yes (Azure live, AWS/GCP coming)
No
MACC-eligible
No
Yes (Azure)
No
Resellable by partners
No
Yes, at any price
Yes via Mode 2

On narrow screens, scroll the table horizontally to see all columns.

Pricing FAQ

Common pricing questions

Mode 1 is one HexaEight identity bound to one machine, self-installed. It serves customers who want sovereignty. Mode 2 is a Marketplace VM that hosts unlimited identities under your own domain. It serves enterprises building their own product with their own identity layer. Different buyers. Not competing tiers.
When you need tamper-evident audit trails (signed requests, signed responses, signed log entries) that hold up in front of regulators, auditors, or courts. Common cases: EU AI Act compliance, DPDPA accountability, HIPAA-relevant AI processing, AML decisioning, multi-device coding context integrity. Add Signature to any identity from Mode 1 or Mode 2.
Signatures are self-contained JWTs with the verification key embedded in the JWT itself. Anyone can verify without contacting HexaEight servers, without an account, without paying any fee, and completely offline. We monetize signing, not verification. The more people verify for free, the more valuable the signature becomes.
Yes. That is the Mode 2 use case. A partner buys a Marketplace VM at $144/core/month, hosts hundreds of identities on it, and resells each at any price, including below our direct $72 rate. We do not undercut our partners. We sell the primitive. Partners make the money on top.
Bedrock and Foundry are AI gateways. HexaEight is the identity layer that sits in front of them. We don't compete with hyperscalers. We provide a cryptographic identity primitive that they (or you) can bundle and resell on top of their own AI services.
The license is cryptographically tied to the specific machine it was activated on. Activation creates a hexaeight.mac file and an env-file containing the hostname, login token, password, and license code. Copying these files to a different machine will not work; the license validates against the original machine's environment. One license, one machine.
Yes. Activate a Marketplace VM (Mode 2), move the identities you want to migrate, and let the Mode 1 license expire naturally. Mode 1 and Mode 2 can also run side-by-side indefinitely.
The HexaEight platform runs on Microsoft Azure, which gives us inherited SOC 2 Type II, ISO 27001 / 27017 / 27018, HIPAA BAA, and (in Azure Gov regions) FedRAMP at the infrastructure layer. Additional application-layer attestation details are available to enterprise customers under NDA.
Skip The Decision Tree

Not sure which mode you need?
Hand this page to your AI assistant.

Point Claude Code, Cursor, or any coding agent at /llms.txt with your scenario. It will tell you which mode fits, what it costs, and how to deploy.

Open /llms.txt Ask a human