Plan comparison & limits
Compare PulsVault plans — Free, Premium, Solo Professional, Family, Team, Business, and Enterprise — across vaults, sharing, security, administration, and limits.
A side-by-side look at what each plan includes. To change plans, see Plans & subscription.
The Enterprise plan currently appears as Coming soon in the plan selector and cannot be bought yet. The Enterprise column describes its limits; it does not describe single sign-on or provisioning features, which are not part of PulsVault today.
Who each plan is for#
Free Premium Solo Pro Family Team Business Enterprise
Core#
| Capability | Free | Premium | Solo Pro | Family | Team | Business | Enterprise |
|---|---|---|---|---|---|---|---|
| Personal vault | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Additional vaults | — | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Members / seats | 1 | 1 | 1 | up to 6 | 2–10 | 3–500 | from 25, no cap |
| Storage | 512 MB | 5 GB | 20 GB | 5 GB for the whole family | 10 GB per seat | 25 GB per seat | Unlimited |
| All 20+ item types | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Encryption | AES-256-GCM | AES-256-GCM | AES-256-GCM | AES-256-GCM | + ChaCha20 | + ChaCha20 | all + XChaCha20 |
Sharing#
| Capability | Free | Premium | Solo Pro | Family | Team | Business | Enterprise |
|---|---|---|---|---|---|---|---|
| Share full vaults | — | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Active vault shares | 3 | 20 | 20 | ∞ | ∞ | ∞ | ∞ |
| Secure links | 3 live (24 h max) | ∞ (30 d max) | ∞ (30 d max) | ∞ (30 d max) | ∞ (30 d max) | ∞ (30 d max) | ∞ (30 d max) |
| Re-sharing | — | ✓ | ✓ | ✓ | admin-controlled | admin-controlled | admin-controlled |
Security & devices#
| Capability | Free | Premium | Solo Pro | Family | Team | Business | Enterprise |
|---|---|---|---|---|---|---|---|
| Two-factor (TOTP) | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Trusted devices | 5 | 5 | 5 | 10 | 15 | 25 | Unlimited |
| Personal Security Center (My security) | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Organization Security Center (Security posture) | — | — | — | — | ✓ | ✓ | ✓ |
| Breach monitoring | — | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
Your personal Security Center is available on every plan, including to members of an organization. The organization-wide view an administrator reads starts at Team.
Tasks, projects & calendar#
| Capability | Free | Premium | Solo Pro | Family | Team | Business | Enterprise |
|---|---|---|---|---|---|---|---|
| Task workflows, projects & calendar | — | — | ✓ | — | ✓ | ✓ | ✓ |
| Task delegation, watchers, organization targets, approval workflow | — | — | — | — | ✓ | ✓ | ✓ |
| Project members | — | — | — | — | ✓ | ✓ | ✓ |
DevOps secrets & credential validation#
Machine-plane secrets for CI/CD, and continuous checks that the credentials in them still work. Available on Solo Professional and the multi-seat plans — Premium and Family sit between them on price but are built for people, not pipelines.
| Capability | Free | Premium | Solo Pro | Family | Team | Business | Enterprise |
|---|---|---|---|---|---|---|---|
| DevOps secrets & machine identities | — | — | ✓ | — | ✓ | ✓ | ✓ |
| Credential validation probes | — | — | ✓ | — | ✓ | ✓ | ✓ |
| Namespace access grants | — | — | — | — | ✓ | ✓ | ✓ |
| Validation run history | — | — | 30 days | — | 90 days | 180 days | 365 days |
Validation history is the per-run record behind a credential's uptime, latency and failure breakdown. Runs older than the window are purged automatically; the health summary for a credential remains available regardless of age.
How much a workspace can hold#
Alongside the features above, each plan caps how many DevOps objects one workspace may hold at a time. These are guard rails against a runaway script, sized well above normal use. A solo developer on 25 machine identities has room for more than a handful of projects.
| Object | Free | Premium | Solo Pro | Family | Team | Business | Enterprise |
|---|---|---|---|---|---|---|---|
| Machine identities | — | — | 25 | — | 50 | 100 | 200 |
| API keys per machine identity | — | — | 10 | — | 25 | 25 | 25 |
| Namespaces | — | — | 50 | — | 200 | 500 | 500 |
| Access policies | — | — | 200 | — | 500 | 1,000 | 1,000 |
| Custom environments (beyond dev, test, staging, prod) | — | — | 10 | — | 25 | 50 | 50 |
| Live secrets | — | — | 5,000 | — | 20,000 | 50,000 | 50,000 |
Archived identities and namespaces, revoked keys and deleted secrets do not count. A workspace already
above a limit (after a plan change, for example) keeps everything it has: only creating more is refused,
with a 409 and the error code DEVOPS_QUOTA_EXCEEDED, and the message names the limit. A bulk write that
would cross the secrets limit is refused as a whole.
A recursive listing (?recursive=true, pulsvault list -R) returns at most 5,000 secrets. When the server
cuts one it says so in the X-Result-Truncated: true response header, and the CLI's export and run
refuse to continue on a cut listing instead of loading part of a namespace.
Administration#
| Capability | Free | Premium | Solo Pro | Family | Team | Business | Enterprise |
|---|---|---|---|---|---|---|---|
| Family management | — | — | — | ✓ | — | — | — |
| Organization roles & policies | — | — | — | — | ✓ | ✓ | ✓ |
| Custom roles | — | — | — | — | ✓ | ✓ | ✓ |
| Reports Center | — | — | — | — | ✓ | ✓ | ✓ |
| Your own activity log | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Organization audit trail, dashboard & CSV/JSON export | — | — | — | — | ✓ | ✓ | ✓ |
| Integrity verification & SIEM streaming | — | — | — | — | — | ✓ | ✓ |
| Audit retention | 30 days | 90 days | 90 days | 1 year | 1 year | 7 years | Unlimited |
Within Team, Business, and Enterprise, admins may tighten limits further with policies. The values here are plan ceilings, not guarantees of looser organization settings.
The primary vault is always AES-256-GCM and never shareable on every plan — see Security invariants.