No complex volume calculations. No per-seat fees. No hidden charges. One price per app — your whole team gets access.
No card required for trial
Map your VibeAlerts coverage to 20 SOC2 Trust Service Criteria (CC2–CC9, A1, C1). Export auditor-ready evidence CSVs. Help close enterprise deals that stall on security questionnaires.
| Feature | Free | Starter Popular | Pro | Enterprise |
|---|---|---|---|---|
| Apps & Ingest | ||||
| Maximum apps | 3 | 10 | 50 | Unlimited |
| Webhook ingest | ✓ | ✓ | ✓ | ✓ |
| MCP integration | ✓ | ✓ | ✓ | ✓ |
| API key management | ✓ | ✓ | ✓ | ✓ |
| Alert Types | ||||
| Security alerts | Core (18) | All 33 | All 33 | All 33 |
| Performance alerts | Core (8) | All 15 | All 15 | All 15 |
| Cost alerts | — | All 12 | All 12 | All 12 |
| Usage & behavior alerts | — | All 23 | All 23 | All 23 |
| Error & exception alerts | ✓ | All 11 | All 11 | All 11 |
| Notification Channels | ||||
| ✓ | ✓ | ✓ | ✓ | |
| Slack | — | ✓ | ✓ | ✓ |
| Discord | — | ✓ | ✓ | ✓ |
| Microsoft Teams | — | — | ✓ | ✓ |
| Custom webhook | — | ✓ | ✓ | ✓ |
| Channels per app | 1 | 3 | 10 | Unlimited |
| Alert Rules & Logic | ||||
| Pre-built rule templates | ✓ | ✓ | ✓ | ✓ |
| Custom alert rules | — | — | ✓ | ✓ |
| Per-severity routing | — | ✓ | ✓ | ✓ |
| Cooldown & deduplication | ✓ | ✓ | ✓ | ✓ |
| Data & Retention | ||||
| Alert retention | 7 days | 90 days | 1 year | Custom |
| Alert history export | — | ✓ | ✓ | ✓ |
| Dashboard analytics | Basic | Full | Full | Full |
| Enterprise & Security | ||||
| SSO (SAML/OIDC) | — | — | — | ✓ |
| SCIM provisioning | — | — | — | ✓ |
| On-premises deployment | — | — | — | ✓ |
| Uptime SLA | — | — | — | 99.9% |
| Dedicated support | — | — | — | ✓ |
| SOC2 Compliance Module | ||||
| 20 SOC2 controls mapped | — | +$30/mo | +$30/mo | Free |
| Live evidence counts | — | +$30/mo | +$30/mo | Free |
| Auditor CSV export | — | +$30/mo | +$30/mo | Free |
| Coverage score dashboard | — | +$30/mo | +$30/mo | Free |
An app is any web service, API, or application you register in your VibeAlerts dashboard. Each app gets its own webhook URL and API key. You might have one app per product, per environment (staging, production), or per microservice — it's up to you. Your whole team can monitor all your apps with one account.
No. VibeAlerts works via standard HTTP. For AI agents (Cursor, Claude Desktop, Windsurf, etc.), add the MCP config — a JSON file edit, no install. For application events, POST JSON to your webhook URL. No library, no agent, no daemon.
The SOC2 Module maps your alert activity to 20 SOC2 Trust Service Criteria across 9 categories (CC2–CC9, A1, C1). When your auditor asks "how do you monitor your applications?", you export a CSV that shows: the control, its description, which alert types cover it, and how many events were detected in the last 30/90 days. It doesn't replace a full SOC2 audit, but it provides the monitoring evidence component for AI-generated application stacks.
Covered means your platform is active (apps connected + channels configured) AND you have alert events from the relevant category in the last 90 days. Configured means monitoring is in place but no events were detected — which may actually mean your controls are working and preventing incidents. Both statuses are acceptable for SOC2 evidence purposes. Auditors care that the monitoring infrastructure exists.
Yes — register them as separate apps. Each gets its own webhook URL and API key so alerts don't mix across environments. On Free, you'd use 2 of your 3 app slots. Starter gives you up to 10, so you can monitor multiple environments per service.
Yes. Starter and Pro plans include a 14-day free trial with no credit card required. You get full access to all features including the SOC2 module during the trial period.
Yes. MCP integration is available on all plans including Free. You can connect Cursor, Claude Desktop, Windsurf, or any MCP-compatible tool and start receiving alerts immediately.
The SOC2 Compliance Module is a $30/month flat add-on to your Starter or Pro plan — it's not per-app. You add it once and it covers all apps in your account. Enterprise plans include it at no additional cost. Admins can enable/disable the add-on at any time.
Yes. Starter and above can export alert history as CSV. The SOC2 module adds an additional export specifically formatted for auditors, with control IDs, descriptions, evidence counts, and coverage status.
Pro includes a lightweight proxy layer for OpenAI, Anthropic, and Gemini API calls. Route your LLM calls through it and we'll automatically track token usage, detect spend anomalies, and flag unmetered endpoint exposure — without any changes to your code beyond the base URL.
3 apps, no card, no expiry. Upgrade when you need more.