Same engine.Different room.
The open-source core is the whole product, not a funnel into a paid one. Enterprise sells the governance layer, tuning and people, the things a large organisation cannot self-serve.
- Detection
- Investigation
- Deployment
- Governance
- People
Two editions. One engine.
Detecting, investigating and deploying are open source in full. Enterprise adds the lock on the cabinet and the engineers who know your domain.
Core
Everything that detects, investigates and deploys. Run it on a laptop or across a cluster, for as long as you like, no seat count, no expiry.
- Every connector, detector pack and custom-detector tier
- Inquiries, fingerprints, cases and the AI autopilot
- The Docker image and the Helm chart, both fully featured
- Workspace isolation is in the core and always on
Governed
The core plus the lock on the cabinet, and engineers who learn your domain. Our people work with your team from the first pilot instead of handing over a licence key.
- SSO, roles and per-workspace authorization
- Models tuned on your terminology and your languages
- Detectors and sources built for your industry's data
- Architecture reviews, OpenShift, SLA-backed support
A partnership, not a licence key.
Our engineers work with your team from the first pilot. We learn how your business names things and tune Classifyre to how your company actually works.
- 01
Pilot
We pick one real investigation together and run it on your data, inside your estate.
- 02
Architecture review
Your cluster, your identity provider, your database. The deployment is reviewed before it becomes infrastructure.
- 03
Tuned detection
Models and detectors tuned on your terminology and your industry's data, built by our engineers together with yours.
- 04
Rollout and support
Upgrade assistance, OpenShift, SLA-backed support and named engineers who know your cases.
The whole comparison
Four of the five groups below are identical between editions.
Detection
Identical. The engine is the open-source project.
Every source connector
Databases, lakehouses, collaboration tools, storage, streams
- Open source
- ✓
- Enterprise
- ✓
Built-in detector packs
PII, secrets, code security, threats, content quality
- Open source
- ✓
- Enterprise
- ✓
Custom detectors
Regex, entity classification, Hugging Face models, any LLM
- Open source
- ✓
- Enterprise
- Built with you
Semantic ranking
Importance 0–1 with written reasons, not just severity
- Open source
- ✓
- Enterprise
- Calibrated to your corpus
Detection tuned to your terminology
Models trained so a term means what it means at your company
- Open source
- –
- Enterprise
- ✓
Multilanguage detection tuning
- Open source
- –
- Enterprise
- ✓
Investigation
Identical. Cases are the product, in both editions.
Findings, inquiries and fingerprints
- Open source
- ✓
- Enterprise
- ✓
Cases, hypotheses and evidence trails
- Open source
- ✓
- Enterprise
- ✓
AI investigation autopilot
Five agents working the investigation between scans
- Open source
- ✓
- Enterprise
- Tuned to your workflows
In-app assistant and MCP server
Drive the whole product from your own AI client
- Open source
- ✓
- Enterprise
- ✓
Notifications and data export
- Open source
- ✓
- Enterprise
- ✓
Deployment
Identical. No runtime is held back.
All-in-one Docker image
macOS, Windows, Linux; PostgreSQL inside
- Open source
- ✓
- Enterprise
- ✓
Helm chart on Kubernetes
Scales as far as the estate demands
- Open source
- ✓
- Enterprise
- ✓
Workspace isolation
Own schema, evidence, AI memory and endpoint per workspace
- Open source
- ✓
- Enterprise
- ✓
OpenShift
With upgrade assistance from our engineers
- Open source
- –
- Enterprise
- ✓
Governance
The real difference: the lock on the cabinet.
Single sign-on (SSO)
- Open source
- –
- Enterprise
- ✓
Roles and permissions
- Open source
- –
- Enterprise
- ✓
Per-workspace authorization
An auditor opens the audit workspace and nothing else
- Open source
- –
- Enterprise
- ✓
People
What you get besides software.
Support
- Open source
- GitHub issues
- Enterprise
- SLA-backed, named engineers
Onboarding
- Open source
- Docs and the showcase
- Enterprise
- Guided pilot, architecture review
Roadmap influence
- Open source
- Open issues and PRs
- Enterprise
- Direct, on your industry's data
Price
- Open source
- Free, forever
- Enterprise
- Talk to us
Workspace isolation lives in the open-source core and is always on; a workspace has its own database schema, evidence, AI memory and endpoint. Enterprise does not add the wall; it adds the authorization that decides who may open which drawer.
How workspaces work →Start free. Call us later.
Almost everyone starts on the open-source core and stays there. The conversation is worth having when SSO, roles and a tuned model start mattering more than the scan itself.
Or poke at the live showcase first →