Simple, scalable
MSP pricing.

Pay per managed device. Volume discounts apply automatically. Every tier includes the endpoint agent, browser extension, and Microsoft 365 OAuth scanner.

Estimate your cost

Drag the slider to see your monthly rate at any scale.

50
Per-device rate$1.00/device/mo
Monthly total (50 devices)$50.00/mo
DevicesRate
1–99 devices$1.00/device
100–249 devices$0.95/device
250–499 devices$0.90/device
500–999 devices$0.85/device
1000+ devices$0.80/device
Join the Waitlist

Be first to know when we launch.

How ShadowLock stacks up

ShadowLock is the only MSP-channel shadow AI tool with all three control layers. The competitors below each cover one of them — read the honest side-by-side for the one closest to your shortlist.

Pricing questions

How much does ShadowLock cost?+

ShadowLock starts at $1.00 per device per month for the first 99 devices and drops to $0.80 per device per month above 1,000 devices. Pricing is volume-tiered and includes the Windows endpoint agent, managed browser extension, Microsoft 365 OAuth scanner, and the multi-tenant MSP dashboard.

What counts as a "device"?+

A device is any managed Windows endpoint that runs the ShadowLock agent. The browser extension is included on every covered device. There is no per-user fee — a laptop used by one person counts as one device whether that person uses one browser or four.

Do MSPs get partner pricing?+

Yes. MSPs roll their entire client base into a single billing account, so volume tiers compound across every tenant. Most MSPs land in the $0.80–$0.90 per-device band once their portfolio crosses a few hundred endpoints. Partner-tier billing and per-tenant policy are included.

How is billing handled?+

ShadowLock bills month-to-month with no minimum commitment. Add devices and your tier updates automatically. Annual billing is available on request and includes a discount on top of the volume tier.

How does ShadowLock compare to other shadow AI tools?+

ShadowLock is the only MSP-channel shadow AI tool that covers three control layers — Windows endpoint, managed browser, and Microsoft 365 tenant via Graph. See the comparison hub for honest side-by-side breakdowns against DefensX, ThreatLocker, DNSFilter, Control D, and Conceal.