Pricing
Start free. Pay for evidence.
Every price is set by one number: how many workflows your Okta Workflows console lists. You can read it off the console yourself, and nothing Assay discovers can raise it.
Free
- Your estate’s architecture, drawn in about a minute
- Export as PNG, SVG or an animated GIF
- Your grade, A to E, with the score and the reason for it. Ask, and we send it within a working day.
- The findings themselves
One-off
- Every control result, with the evidence behind it
- Every finding, with the flows and cards affected
- Prioritised improvement register
- Signed report (PDF and HTML) and a JSON export
- A walkthrough call on the findings
- Delivered within five working days
Annual, hosted
- Re-assess the estate as often as it changes
- A signed report every quarter
- Version history: what each flow contained, and when
- Runtime evidence from Okta’s execution log stream
- Named sign-in with your own Okta, up to 10 people
- Answers from us within one working day
Scoped
- More than 300 workflows, or several Okta orgs
- Self-hosted, inside your own network
- Partner and MSP plans across many tenants
- Your own retention, region and security review
How we count
You pay for the workflows your console lists. We assess the ones it doesn’t.
Counted
Every workflow in the console, across every folder you export, including helper flows that other flows call. They appear in the console list, so they count.
Not counted, assessed anyway
Loop bodies and inline error handlers, which run in production but are not listed as separate workflows. Tables and connections, which are read for context. Across 125 public template folders that is 560 workflows counted and 867 assessed.
Re-assessments follow the estate
Each Assessment, and each Workspace renewal, is banded on the console count at that time. If the estate shrinks, so does the price. Retiring dead workflows can lower what you pay next time, and the improvement register lists the candidates.
If our count and yours differ
Every report prints the console’s own count beside what Assay found. The console count is the one that sets the price.
What is included, and what is not
Plain terms.
Included in every paid plan
- Every folder export you supply, at no per-file charge within your band
- The signed report in PDF and HTML, and all findings as JSON
- A re-issue at no charge if we make an error
Design partners
The first five Assessments are free, in exchange for a conversation about the findings and permission to publish anonymised aggregate statistics. No logo, no named reference. About design partners →
Not included, deliberately
- Remediation. Assay reports and does not fix. Selling the fix for a problem we graded would compromise the independence the report rests on. We refer you to implementation partners and re-assess afterwards.
- Access to your Okta. We never connect to your tenant, and we will decline if asked.
- Certification. A signed report states configuration facts as of the export date. It is not a security certification.
Prices are in US dollars and exclude applicable taxes. Assessments are invoiced on delivery; Workspace and Enterprise plans annually in advance. Invoicing in Indian rupees is available on request.
Not sure which fits?
Draw your estate first. It tells you your workflow count, and so your band, in about a minute.