PRICING

Start free. Pay as you delegate.

No seat traps. Scale by the access you lend, not the size of your team.

Starter
$0/mo
Start free
Up to 25 credentials
5 active grants
Envelope encryption
7-day audit log
TeamPopular
$49/mo
Start 14-day trial
Unlimited credentials
Zero-knowledge vault
Mobile approvals + Stuck queue
Self-serve token center
Roles & SSO
Scale
Custom
Talk to us
Connect Tesska (OAuth) embeds
AI-agent access at scale
Pluggable backends · 1Password / Bitwarden
SLA + dedicated support
FOR PLATFORMS & INTEGRATORS

Offer Tesska to your users

Your users connect their own Tesska via OAuth — your platform acts with per-user, revocable, scoped tokens and never touches raw credentials. Only successful deliveries are metered.

Developer$0

2,000 successful calls · 50 active connections / mo · 1 app

Platform$199/mo

50,000 calls + 2,000 connections · then $1 per 1,000 calls · $0.05 per connection

Enterprisefrom $999/mo

Custom quotas · 99.95% SLA · audit export · dedicated support

Compare plans

FeatureStarterTeamScale
Credentials25UnlimitedUnlimited
Zero-knowledge vault
Active grants5UnlimitedUnlimited
Scope narrowing
Mobile approvals
Stuck queue routing
Token center
Connect Tesska (OAuth)
AI-agent access
Audit retention7 days1 yearCustom
Roles & SSO
SupportCommunityEmailDedicated

Questions

Do you ever see my passwords?

With zero-knowledge mode, no — secrets are encrypted on your device. In envelope mode we hold only ciphertext and decrypt transiently to broker a single call.

What happens when I revoke a grant?

The token stops working immediately, everywhere. In-flight calls fail closed and land in the audit log.

Can AI agents use Tesska?

Yes — it’s a core use case. Agents get a scoped, approvable, revocable token instead of your real credential.

Do you support 1Password or Bitwarden?

On the Scale plan you can point Tesska at your existing vault as a pluggable backend.

Ready to lend access, not passwords?