Argument 5Pricing
Install topology is the pricing story.
Core installs in production and answers the read questions. Masking installs only in sandboxes and adds the write loop. The line item you buy is the line item you get. No seat maths. No consumption surprises.
Where each package lives
Two packages. Two prices. Two install targets. No hidden third.
fig. 05 · installs, not seats
The catalog
orgwarden-core
£2,450
/ org / month
read-only · production-safe · installs in prod and sandbox
orgwarden-redact
£850
/ org / month
write · sandbox-only at runtime · add-on
Install targets
Production orgone line item
yes
orgwarden-core
allowed · read-only
no
orgwarden-redact
refused · not a distribution option
Sandbox orgsincluded with Core
yes
orgwarden-core
allowed · included in Core
yes
orgwarden-redact
allowed · adds sandbox write loop
one production install is one line item · sandboxes come with it
Free Baseline Scan
£0
One org · no obligation
- PII discovery across every object
- Findings checked by check digit where one exists
- Baseline Report (PDF + CSV)
- Metadata-only, always
The base subscription
Core
orgwarden-core£2,450
/ org / month
Installs in production + sandboxes
- Everything in the free scan, on every sweep you run
- Multi-org estate view
- Access mapping (effective FLS plus sharing)
- Drift detection over snapshots
- Evidence Packs (audit-ready exports)
- File and attachment scanning
- REST plus Bulk API integrations
Add-on · sandbox-only
Masking
orgwarden-redact£850
/ org / month
Non-production orgs only
- NULL, FIXED, and SCRAMBLE transforms
- Dry-run preview and validation-collision surfacing
- Five-check write gate
- Sandbox refresh lifecycle (jobs park until the package is installed)
- Approver permission set
- One-way transform. No unmask.
Design-partner note ·The first ten customers lock these prices for 24 months and get direct input on the roadmap. We are currently onboarding customer 1.
Included in every plan
Table stakes. A governance tool that gates on tier is a governance failure.
STD-1
Metadata-only architecture
Values never leave the org. There is no premium tier that changes this.
always
STD-2
Unlimited users and admins
Read-scope for governance teams is not the axis we price on.
per org
STD-3
Full API access
REST plus Bulk API on every plan. No API tier.
from day one
STD-4
Evidence Pack exports
Findings, snapshot hash, masking-run records. The artefact you hand a regulator.
CSV + PDF
STD-5
Direct-to-founder support
While Org Warden is small, you email the person who wrote the code.
until we can’t
Questions
The ones that come up in every discovery call.
Yes, enforced three ways. The Mask package is only installable in non-production orgs (distribution). The dispatcher hard-checks Organization.IsSandbox on every write-job start (runtime). And no code in the Core package that lives in production performs DML against customer objects (absence).
A billable org is any production Salesforce org where Core is installed. Sandboxes are included in the parent org’s subscription. You do not pay per sandbox. The Masking add-on is priced per production org whose sandboxes you want to mask.
Zero. You get a Baseline Report, the same artefact paying customers get on day one, for one org. The scan is metadata-only, so nothing leaves your Salesforce org. If you want a second org covered, or the first one re-scanned whenever you choose, that is a paid subscription.
Annual invoicing in GBP by default. USD and EUR available. Standard MSA plus a one-page DPA (metadata-only makes the DPA short). We can respond to security questionnaires directly. Turnaround measured in days, not weeks.
Uninstall both packages from Setup. Your data was never in our systems, so there is nothing for us to delete on your behalf. We keep the evidence exports you generated for 30 days after cancellation in case you need to re-download them, then purge.
Free baseline scan
Scan one org free. See where your PII lives.
No install-to-buy. You get a Baseline Report (the same artefact paying customers get) for one Salesforce org. Metadata-only, always. Your data never leaves your org.
Work email · we reply within 1 business day