Cloud-hosted

• ✓ Free tier with no card: one AWS account, all 19 detection rules.
• ✓ You connect AWS with a read-only role. Nothing is changed until you add the remediation policy yourself.
• ✓ Invite your team with read or write access, per AWS account.
• ✓ Prefer it on your own infrastructure? Self-host instead — same product, same prices.