Plans, billing & enterprise

Subscription shows the workspace's plan, what it's using against each limit, payment and cancellation, billing details and invoices. Plans, the tab beside it, is where you compare plans, upgrade and change seats or billing period. Owners, administrators and billing users can read it; owners, administrators and billing managers can change the plan. Billing access does not grant access to agent activity or devices. The plan is also shown at the foot of the sidebar.

Plans

	Free	Pro	Team	Enterprise
For	Trying Beam with your team	One person, developer or not	Developers and everyone else	Security and procurement
Price (billed yearly)	$0	$8 / month	$20 per developer seat, $5 per browser seat, a month	Custom
Price (billed monthly)	$0	$10 / month	$24 per developer seat, $6 per browser seat, a month	Annual agreement
People with a device	3	1	Per seat	Custom
Devices	5	10	3 per developer seat, 2 per browser seat	Unlimited
Members without a device	10	—	Unlimited	Unlimited
Monitored apps	1	3	10	Unlimited
App monitoring findings / dependency checks / LLM checks a month	1,000 / 100 / 100	20,000 / 2,000 / 2,000	50,000 / 5,000 / 5,000	Custom
AI assistant questions / tokens a month	50 / 500k	500 / 5M	1,000 / 10M	Custom
Team library items / uploads a month	10 / 30	100 / 300	500 / 1,000	Unlimited

Agent activity capture, skill, MCP and package scanning, observe/advisory/enforce policy and the Sentinel browser extension are never limited on any plan. The local-first CLI needs no account and no plan at all. Prices are in USD, plus tax where it applies.

Who takes a seat

A seat is a person who connects a device, never a member who only reads the dashboard. Owners, administrators, auditors and billing users who connect nothing are free.

A developer seat covers anyone with a coding agent connected through the CLI.
A browser seat covers someone protected only by the browser extension, such as people using ChatGPT, Claude or Gemini in the browser. A browser-only person can also use a spare developer seat.

The first device a person connects takes their seat; connecting a CLI on a machine that had only the extension moves them to a developer seat. Reconnecting a machine that is already connected (same host name and OS) replaces it and never counts again. Remove devices you no longer use under Devices to free room in the device pool.

Limits and usage emails

The Plan usage panel shows every limit with what's used. Monthly allowances reset on the 1st of each month (UTC).

When the workspace reaches 80% of a limit, and again at 100%, owners, administrators, billing managers and the billing email get one email for that limit that month. It says what is used, what happens at the limit and the simplest next step, linking to Plans with that step preselected: upgrading from Free, moving from Pro to Team, adding seats, or Enterprise for allowances that don't grow with seats. The same notice shows as a one-line banner in the dashboard for people who can act on it, and goes away once usage drops back.

At a limit nothing is deleted and nothing connected is cut off. New devices, apps, invitations or library items wait for room; App monitoring findings, dependency checks, assistant questions and library uploads wait for the reset. When a device can't connect, the dashboard says why as you approve the connection, and beam connect prints the reason with the Subscription link.

Upgrade

On Free, Plans offers Pro (only for a workspace with one person) and Team. Choose yearly or monthly and, for Team, the number of developer and browser seats; the total shows before anything is charged, and you can't choose fewer seats than people already connected. Checkout is hosted by Stripe, charged as AgentBeam, and collects the billing address and tax ID for the invoice. Promotion codes are accepted. The plan is active as soon as payment succeeds.

Change plan or seats

With a subscription, Plans uses the same picker: switch between Pro and Team, add or remove seats, or move between monthly and yearly. Changes apply immediately and Stripe prorates them: more seats or a higher plan is charged for the rest of the period, fewer is credited to the next invoice. Every change is audit-logged as billing.plan_changed.

Cancel

Cancel subscription ends the plan at the close of the current period, with no further charges. Everything keeps working until then, after which the workspace moves to Free: no data is deleted and connected devices stay connected, while new ones wait for room under the Free limits. Keep my subscription undoes it any time before the period ends, and changing the plan does too. Scheduling and withdrawing a cancellation are audit-logged.

Billing details and invoices

Subscription holds the billing profile finance needs: legal entity name, billing email, tax ID (VAT, GST or EIN), purchase order number and billing address. Owners, admins and billing managers can edit it; everyone else with billing access reads it. Saves are audit-logged as billing.details_changed, naming the fields that changed but never their values. The legal name and billing email are used for the Stripe customer when the first subscription starts.

Invoices lists recent invoices from Stripe with links to view and download each PDF. Open billing portal opens Stripe's portal for payment methods, billing contacts and receipts.

Enterprise

Enterprise covers volume pricing, annual invoicing against a purchase order, custom limits, a security and procurement review, and self-hosting. Talk to sales to set it up. SAML/OIDC SSO, SCIM, automated retention jobs and SIEM push are not available yet; confirm requirements before you buy.

Self-hosted licensing

The self-hosted dashboard uses an installation-bound signed license with edition, expiry, and seat count. Its seats cap members installation-wide, its App monitoring claim caps monitoring, and the other limits above don't apply. Validation is offline using the publisher verification key baked into the image. An invalid or expired license stops new configuration, invitations, enrollment, and ingestion; history reading/export, risk review, and access revocation remain available.

Renew by following your deployment operator's license-replacement procedure. Recreate the dashboard container after replacing the license mount so it reads the intended file.

Public CLI and enterprise monitoring

The public @agent-beam/beam CLI provides local capture, Studio, offline scanning, and its implemented workspace connection/policy path. The optional proprietary beam-enterprise companion adds OS process/network observation where supported. Hook-based capture continues without that optional package.

Current enterprise source uses process and network inspection mechanisms such as ps and lsof. Installing the package is not proof of complete operating-system coverage, packet capture, or universal enforcement. Validate the target OS, package entitlement, running monitor, and observed event source before making a coverage claim.

The browser extension has its own installation and authorization requirements. A subscription does not automatically enroll devices or install every integration.