Pricing

Identity Platform handles authentication: SSO, MFA, passkeys, federation, and directory sync. Identity Governance handles authorization: roles, approval workflows, access requests, lifecycle, and outbound provisioning. You can use Platform on its own. Governance runs on Platform, and the $25 governed-user price includes Identity Platform Professional for those users, so nobody is billed twice.

A monthly active user is any unique person who signed in at least once during the billing month, whether they're on your staff or outside it. Service accounts, machine-to-machine credentials, and failed sign-in attempts don't count. Essentials includes the first 10,000 MAU free. Professional bills every MAU, from the first.

A governed user is anyone with an enabled account holding at least one application role, including a role scoped to part of your organization. We count them on the first day of each billing month, so someone who gets their first role mid-month is billed from the next month. The count doesn't depend on whether they signed in this month, how many roles they hold, or how many approvals they took part in. Deactivated accounts drop out, and service accounts never count.

Using governance more deeply costs nothing extra. Adding roles, routing more requests through workflows, or bringing more apps under policy doesn't change your bill. Only the number of people under governance does.

No. Each organization is metered one way. A Governance organization is billed on governed users, with their sign-in included. A Platform organization is billed on MAU.

People in a Governance organization who don't hold a role, such as new hires before provisioning or teams you haven't brought under governance yet, sign in at no charge.

Run them as two Galeo organizations: Identity Governance for the workforce and Identity Platform for public users. Each is metered on its own unit, and the two populations keep separate directories, policies, branding, and audit scope.

An annual license negotiated per contract, not metered by MAU or governed users. Terms are typically unlimited use for the licensed deployment, which gives procurement a fixed annual figure. Multi-year terms are available. Contact sales@getgaleo.com.

Yes. Under 10,000 monthly active users you stay on Essentials with no time limit and no credit card. Past 10,000 you'll be asked to add billing, and your organization keeps running. We don't sell or share your sign-in data.

If you haven't added billing, your organization moves to Identity Platform Essentials, which is always free. Your users keep signing in; Professional and Governance features turn off until you upgrade.

Yes. Governance acts on identities stored in Galeo. You don't pay extra: the governed-user price includes Identity Platform Professional. Most teams start on Identity Platform, often the free tier, and add Governance when they need it.

Outbound SCIM creates, updates, and deactivates accounts in downstream apps like Slack and Salesforce. You can limit an app to the people who hold one of its roles, and push each role as a group so the app's own permissions follow who holds which role. It grants and removes access, so it lives in Governance. Inbound directory sync (Entra ID, Google Workspace, LDAP, or SCIM into Galeo) is part of Identity Platform Professional.

Yes, on Identity Governance. Galeo streams security events (roles granted and revoked, failed sign-ins, lockouts, session revocations, credential changes, security holds) to Splunk HEC, a syslog collector as CEF over UDP, TCP, or TLS, Amazon SNS, an HTTPS webhook, or a Shared Signals receiver.

Yes. Annual billing is available for Professional and Governance at a discount over monthly. Volume pricing applies at higher counts. Enterprise is annual by default. Contact sales@getgaleo.com for a quote.

Talk to us before you cancel and we'll help you export your data. After cancellation your organization is recoverable for 30 days, then permanently deleted.

It depends mostly on your legal and security review. We can run a pilot while the contract is in progress.