Residual Trust Assurance

Pricing for proving access is actually gone

Leftover access after a rotation is still access. Start free on LAB data, run a scoped production pilot, then move to a subscription once the evidence matters to auditors.

HMAC-SHA256 signed receipts
Kill-receipt hash chain
Auditor evidence packs — not certified
SaaS + sovereign Docker
CAEP-inspired ingest — not SCIM
100% Free · Instant

Lab / Community

$0 / Free Forever
Instant evaluation

Instant evaluation on simulated data for individual engineers and security research.

  • Offline demo inventory (lc_*)
  • Proof Engine v2 simulation & MTPR calculator
  • False-green test battery
  • Local HMAC-SHA256 verification
  • Community support & operator guide

Scope boundaries

  • Live cloud connectors without env setup
  • No SLA (local evaluation only)
Multi-Cloud · Incident Ready

Enterprise / IR Assurance

$1,990 / month
or $19,900 / year · save 17%

For mid-market & enterprise security teams needing multi-cloud coverage and incident assurance.

  • Unlimited Live Connectors (GitHub, GitLab, Google Workspace, Entra SP, AWS IAM)
  • 1-Year signed audit retention with tamper-evident hash chaining
  • CAEP-inspired identity-event ingest at /api/hooks/caep (not SCIM, not a CAEP certificate)
  • Out-of-band remote probe support (PROBE_BASE_URL isolated VLAN)
  • Custom DPA, security questionnaire support & dedicated SLA

Scope boundaries

  • Customer-managed KMS encryption envelope (requires Sovereign)
  • Air-gapped on-premise VPC hosting (requires Sovereign)
Air-Gapped · Defense Grade

Sovereign

Custom · from $50k / yr
Air-gapped / Private VPC

For critical infrastructure, defense contractors, and banks requiring zero-trust isolation.

  • Dedicated Docker / Helm deploy in private customer VPC
  • Customer-managed KMS encryption envelope
  • Zero outbound telemetry or cloud dependencies
  • Custom architecture review & onboarding by founder
  • Dual-control enforcement & air-gapped evidence exports

Scope boundaries

  • Shared SaaS multi-tenant infrastructure

How LingerCut maps to audit requirements without false claims

LingerCut is an objective control and evidence engine. It is not a compliance badge we grant ourselves — it generates cryptographic kill receipts proving leftover trust actually bounced when replayed.

Honesty before the table

  • Trust is a kill receipt after failed-replay or absence bounce — not a compliance badge LingerCut does not hold.
  • VALID only on bounce. WITHHELD means the leftover is still live (false green caught).
  • Not SOC 2, FedRAMP, or ISO certified. Do not buy or pilot us as a checkbox.
  • Lab is 100% free with instant access. Design Partner Pilots are free during our beta program in exchange for direct engineering feedback.
  • Direct founder channel: Ugochukwu Eneh via hello@lingercut.com is live and receiving. In-app Support remains the primary operator queue for pilots; mail and Support both work. Open Support.

How subscriptions & partnerships work

LingerCut is in an active founder-led design partner phase. Qualified teams can pilot the Team / Beachhead tier 100% free during Beta. When moving to commercial subscriptions, metering is transparently based on organization + connectors + operator seats — not per-employee IdP seats and not per-cut. We never penalize operators for cutting leftover trust.

Leave a work email before you open chat

Persists to the existing LingerCut lead store. Not a second list. Not a kill receipt. Live desk stays available in the corner if you already know the leftover-trust question.

Request a Design Partner Pilot, Subscription, or Sovereign Deployment

No credit card required. Submitting stores the request in LingerCut. Lab is instant at /demo. You can also use in-app Support so an operator can pick it up in the queue.

Try the lab demo