Discovery
1 org, to evaluate
€0
permanent
7-day history
Included
- Health score, limits, failed logins, outbound endpoints
- Security core: MFA, guests, OAuth, Modify All Data
- 30-day trial of the full plan
- Annual
- —
Pricing: what each offer contains
- 100 %
- inside your org
- 0
- outbound data by default
- 71
- controls self-assessed out of 255 catalogued
- 10 min
- to install
The French text governs. This page is the English version of Tarifs FR; prices and contractual terms are those of the French version.
The price follows your number of Salesforce users, never the value of your data. This page says what each offer contains, line by line: the product's 139 capabilities are bundled here into 28 grid rows, one row per block of capabilities. An empty cell is an empty cell, not an omission. The capability-by-capability detail lives on the product page.
Small business
up to 15 users
€49
/ month excl. VAT · 1 to 5 users
6 to 15: €99
Every paid feature, and
- 2-business-day support, 10 tickets a month
- No commitment, cancel monthly
- Annual
- €499 · €999
Mid-market
16 to 100 users
€249
/ month excl. VAT · 16 to 40 users
41 to 100: €499
Every paid feature, and
- 2-business-day support, 10 tickets a month
- No commitment, cancel monthly
- Annual
- €2,540 · €5,090
Upper mid-market
101 to 250 users
€1,490
/ month excl. VAT
Single band
Every paid feature, and
- 1-business-day support
- Half-yearly posture review
- Annual
- €15,200
Enterprise
beyond 250 users
€2,490
/ month excl. VAT · 251 to 600 users
601 to 1,500: €4,990 beyond: quote
Every paid feature, and
- 1-business-day support, guided onboarding
- Fleet of up to 5 orgs included, dedicated DPA
- Annual billing only
- Annual
- €25,400 · €50,900
Basis: full, active Salesforce licences of the org concerned — never aggregated across orgs. Monthly with no commitment, cancellable monthly; annual prepaid. Founder pricing: −33% for 24 months on Small business, Mid-market and Upper mid-market, for the first 20 customers or until 31/03/2027, against written permission to cite your logo as a customer reference.
The grid, capability by capability
| Capability | Discovery | Any paid plan |
|---|---|---|
| Supervision | ||
| Health score, platform limits, failed logins, async performance, API versions | included | included |
| Outbound endpoint inventory and callout / SOQL posture | included | included |
| Salesforce Health Check parity: score, active baseline, per-setting verdict four settings recomputed in SOQL alone, open from install; the platform's own verdict goes through your org's self-call, off at install and wired by an administrator | included | included |
| History retained nightly rotating purge on every org, configurable windows: 30 d logs and metrics, 90 d for a finding with no new observation, 180 d snapshots (target window, not a guaranteed maximum: the purge runs by rotation and can fall behind it), 400 d compliance evidence | 7 days | 30 to 400 d |
| Security | ||
| Security core: missing MFA, guest access, public file links, connected apps and OAuth tokens, Modify All Data / View All Data holders on the Discovery offer, the Security score is never called “Healthy” (low coverage) | included | included |
| Toxic permissions, dormant admins, other high-privilege permissions, bulk export, API exfiltration | not included | included |
| Sharing defaults (OWD), system-mode flows, role hierarchy, privilege drift | not included | included |
| Risk costed in euros, adjustable weights | not included | included |
| Custom rules, detector tuning, per-finding SLA | not included | included |
| Accepted-risk policy, rule portability, natural-language query none of the three sends a call out of your org | not included | included |
| Certificate monitoring and active endpoint probes | not included | included |
| Login anomalies: never-seen country, impossible travel, off-hours login by a privileged account no Shield required: derived from LoginHistory and LoginGeo, at every scan | not included | included |
| Event Monitoring log detectors (slow queries, unhandled errors, concurrency) requires a Shield / Event Monitoring licence on the Salesforce side | not included | included |
| Code and configuration | ||
| Apex / LWC code quality, technical debt, declarative lint | not included | included |
| Configuration drift, field deltas, time machine, configuration export | not included | included |
| Compliance | ||
| DORA / NIS2 pack: 71 self-assessed controls across 8 frameworks, signed attestation no Shield required: the evidence ledger is a packaged Big Object, not Field Audit Trail | not included | included |
| Board / CISO report | not included | included |
| Org hardening audit read through your org's self-call: an administrator opens two features, both off at install, and wires the self-call | not included | included |
| Alerts | ||
| In-org alerts (platform event, custom notification) | included | included |
| E-mail, deduplication, grouping, escalation, quiet hours, routing, history, maintenance windows | not included | included |
| Incident correlation (one incident, not five alerts) | not included | included |
| Chatter: posted to a feed in your own org stays inside your org: Chatter is not an outbound flow. Off at install, until you designate the target feed | not included | included |
| Slack, Teams, PagerDuty, webhook outbound flow to a destination you choose, with your credentials | not included | included |
| Integrations | ||
| Read REST API (status, findings) | included | included |
| SIEM export (Splunk, Microsoft Sentinel), ITSM integration (ServiceNow, Jira) | not included | included |
| Multi-org | ||
| EU-hosted web viewer, shareable status page explicit consent, disabled at install | not included | included |
| Multi-org aggregation, white label fleet of up to 5 orgs included in Enterprise | not included | included |
| Service | ||
| Support | documentation | by offer: D+2, 10 tickets a month (Small business, Mid-market); D+1 (Upper mid-market, Enterprise); dedicated DPA and guided onboarding in Enterprise |
Two feature tiers: Discovery, and one paid tier shared by every paid plan. Paid plans therefore differ not by their features but by org size, support and service, as the cards above describe. Prices exclude VAT.
How this grid is built
Source: the package's FeatureGate.FEATURE_TIER gates, read at every build of the site. The code serves only two feature tiers (LicenseManager.isTierSufficient, decision of 21 September 2026). The first opening of the console arms the 30-day trial of the full plan; when it ends, with no licence key, the org is on Discovery, and your key opens the rest with no reinstall.
What the price does not do
It does not rise with the value of your data, the number of findings, or the number of scans. It is not aggregated across orgs: each org is billed on its own licences. It does not include unlimited support — every plan carries a written ceiling, Standard at 10 tickets a month, because support without a ceiling is a promise nobody keeps. The detail is on the support page.
The AppExchange listing status
OrgGuardian is not listed yet: the Salesforce Security Review has not been submitted to date, and we will not call it passed or guaranteed before it is. Installation goes through a direct link handed over when the trial opens. What the package already honours is set out on the publisher security page.
Thirty days of the full plan, on request, no credit card.
Request the trial Self-check your org in 5 minutesReply within one business day
Have your org measured before you choose an offer.
You have just read what each offer contains. What follows is a single scan: read-only, writing nothing into your configuration, and on your own figures rather than on the grid.