Discovery
1 org, to evaluate
€0
permanent
7-day history
Included
- Health score, platform limits, failed logins
- Outbound endpoint inventory
- 30-day trial of the full plan
- Annual
- —
- Technical tier
FREE
Pricing: what each offer contains
- 100 %
- inside your org
- 0
- outbound data by default
- 71/255
- controls self-assessed
- 10 min
- to install
The French text governs. This page is the English version of Tarifs FR; prices and contractual terms are those of the French version.
The price follows your number of Salesforce users, never the value of your data. This page says what each offer contains, line by line: the product's 121 capabilities are bundled here into 26 grid rows, one row per block of capabilities. An empty cell is an empty cell, not an omission. The capability-by-capability detail lives on the product page.
Small business
up to 15 users
€49
/ month · 1 to 5 users
6 to 15: €99
Everything in Discovery, plus
- Toxic permissions, missing MFA, guest access
- Risk priced in euros
- DORA / NIS2 pack, signed attestation
- Annual
- €499 · €999
- Technical tier
PRO
Mid-market
16 to 100 users
€249
/ month · 16 to 40 users
41 to 100: €499
Everything in Small business, plus
- Active endpoint and certificate probes
- Slack, Teams, PagerDuty, webhook
- Board / CISO report
- Annual
- €2,540 · €5,090
- Technical tier
ENTERPRISE
Upper mid-market
101 to 250 users
€1,490
/ month
Single band
Everything in Mid-market, plus
- 1-business-day support
- Half-yearly posture review
- Annual
- €15,200
- Technical tier
ENTERPRISE
Enterprise
beyond 250 users
€2,490
/ month · 251 to 600 users
601 to 1,500: €4,990 beyond: quote
Everything in Upper mid-market, plus
- Fleet of up to 5 orgs included
- Dedicated DPA, guided onboarding
- Annual billing only
- Annual
- €25,400 · €50,900
- Technical tier
ENTERPRISE
Basis: full, active Salesforce licences of the org concerned — never aggregated across orgs. Monthly with no commitment, cancellable monthly; annual prepaid. Founder pricing: −33% for 24 months on Small business, Mid-market and Upper mid-market, for the first 20 customers or until 31/03/2027, against a nameable logo and a published AppExchange review — that review only becoming due once the product is listed, which it is not yet.
The grid, capability by capability
| Capability | Discovery | Small business | Mid-market | Enterprise |
|---|---|---|---|---|
| Supervision | ||||
| Health score, platform limits, failed logins, async performance, API versions | included | included | included | included |
| Outbound endpoint inventory and callout / SOQL posture | included | included | included | included |
| History retained nightly purge on every org, configurable windows: 30 d logs and metrics, 90 d for a finding with no new observation, 180 d snapshots, 400 d compliance evidence | 7 days | 30 to 400 d | 30 to 400 d | 30 to 400 d |
| Security | ||||
| Toxic permissions, over-privileged accounts, missing MFA, dormant connected apps, guest access, bulk export, API exfiltration | not included | included | included | included |
| Sharing defaults (OWD), system-mode flows, role hierarchy, privilege drift | not included | included | included | included |
| Risk costed in euros, adjustable weights | not included | included | included | included |
| Custom rules, detector tuning, saved views, per-finding SLA | not included | included | included | included |
| Accepted-risk policy, rule portability, natural-language query none of the three sends a call out of your org | not included | included | included | included |
| Certificate monitoring and active endpoint probes | not included | not included | included | included |
| Login anomalies: never-seen country, impossible travel, off-hours login by a privileged account no Shield required: derived from LoginHistory and LoginGeo, at every scan | not included | included | included | included |
| Event Monitoring log detectors (slow queries, unhandled errors, concurrency) requires a Shield / Event Monitoring licence on the Salesforce side | not included | not included | included | included |
| Code and configuration | ||||
| Apex / LWC code quality, technical debt, declarative lint | not included | included | included | included |
| Configuration drift, field deltas, time machine, configuration export | not included | included | included | included |
| Compliance | ||||
| DORA / NIS2 pack: 71 self-assessed controls across 8 frameworks, signed attestation no Shield required: the evidence ledger is a packaged Big Object, not Field Audit Trail | not included | included | included | included |
| Board / CISO report | not included | not included | included | included |
| Org hardening audit | not included | not included | included | included |
| Alerts | ||||
| In-org alerts (platform event, custom notification) | included | included | included | included |
| E-mail, deduplication, grouping, escalation, quiet hours, routing, history, maintenance windows | not included | included | included | included |
| Incident correlation (one incident, not five alerts) | not included | included | included | included |
| Chatter: posted to a feed in your own org stays inside your org: Chatter is not an outbound flow. Off at install, until you designate the target feed | not included | included | included | included |
| Slack, Teams, PagerDuty, webhook outbound flow to a destination you choose, with your credentials | not included | not included | included | included |
| Integrations | ||||
| Read REST API (status, findings) | included | included | included | included |
| SIEM export (Splunk, Microsoft Sentinel), ITSM integration (ServiceNow, Jira) | not included | not included | included | included |
| Multi-org | ||||
| EU-hosted web viewer, shareable status page explicit consent, disabled at install | not included | included | included | included |
| Multi-org aggregation, white label fleet of up to 5 orgs included in Enterprise | not included | not included | included | included |
| Service | ||||
| Support | documentation | D+2, 10 tickets / month | D+2 · Upper mid-market: D+1 | D+1, dedicated DPA, guided onboarding |
Source: the package's FeatureGate.FEATURE_TIER gates (FREE / PRO / ENTERPRISE) and the commercial grid. At install, only the Discovery gates are open; your licence key opens the rest, with no reinstall.
What the price does not do
It does not rise with the value of your data, the number of findings, or the number of scans. It is not aggregated across orgs: each org is billed on its own licences. It does not include unlimited support — every plan carries a written ceiling, Standard at 10 tickets a month, because support without a ceiling is a promise nobody keeps. The detail is on the support page.
The AppExchange listing status
OrgGuardian is not listed yet: the Salesforce Security Review has not been submitted to date, and we will not call it passed or guaranteed before it is. Installation goes through a direct link handed over when the trial opens. What the package already honours is set out on the publisher security page.
Thirty days of the full plan, on request, no credit card.
Request the trial Self-check your org in 3 minutesReply within one business day
Have your org measured before you choose an offer.
You have just read what each offer contains. What follows is a single scan: read-only, writing nothing into your configuration, and on your own figures rather than on the grid.