Pricing

Simple, scalable
MSP pricing.

Pay per managed device, billed monthly, with volume discounts that apply automatically. Every tier includes the endpoint agent, browser extension, and Microsoft 365 OAuth scanner. Tell us about your estate and we will send your rate card in about five minutes.

Get your pricing

Four quick questions and we will email your per-device rate card. Most requests are answered within five minutes.

We will email your rate card. If it is not in your inbox, check your spam or junk folder. Our emails often land there.

Everything included

One plan, full feature set, across endpoint, browser, and Microsoft 365. Nothing is held back for a higher tier, so the only thing your quote depends on is how many devices you manage.

Detection
✓AI website, app & extension detection
✓Browser extension scanning & flagging
✓Microsoft 365 OAuth app detection
✓Sensitive data classification at the browser
Enforcement
✓Allow / Warn / Block policy engine
✓Typed-prompt redaction - catch data as it's typed
✓Personal account detection & blocking
✓AI data-sharing / training opt-out enforcement
✓Browser AI lockdown (Gemini, Copilot, Leo, Firefox)
✓Google Search AI Mode control
Built for MSPs
✓RMM-compatible silent deploy
✓Unlimited organizations
✓Export reports for client delivery
✓Email alert notifications
✓90-day event retention
✓Priority support

Compare

How ShadowLock stacks up

ShadowLock works at three control layers: the Windows endpoint, the managed browser, and the Microsoft 365 tenant. Each tool below is strongest at one of them. Read the side-by-side closest to your shortlist — every competitor claim links to that vendor's own documentation.

Browser-extension peerShadowLock vs DefensXBrowser-only. We add the endpoint and the M365 tenant.Compare →Zero-trust allowlistingShadowLock vs ThreatLockerBlocks AI apps. We inspect the prompt and scan M365.Compare →Roundup5 best DefensX alternativesRanked comparison of every MSP-channel shadow AI tool.Compare →

FAQ

Pricing questions

How much does ShadowLock cost?

ShadowLock is priced per managed device per month, billed monthly with no minimum commitment, on volume tiers that lower the per-device rate as your estate grows. Fill in the form on this page and we will email your rate card, usually within five minutes.

What counts as a "device"?

A device is any managed Windows endpoint that runs the ShadowLock agent. The browser extension is included on every covered device. There is no per-user fee - a laptop used by one person counts as one device whether that person uses one browser or four.

Do MSPs get partner pricing?

Yes. MSPs roll their entire client base into a single billing account, so volume tiers compound across every tenant and every client you add lowers the rate on all of them. Partner-tier billing and per-tenant policy are included. Request pricing on this page and, if you are a managed service provider, the rate card is emailed to you automatically.

How is billing handled?

ShadowLock bills month-to-month with no minimum commitment. Add devices and your tier updates automatically. Annual billing is available on request and includes a discount on top of the volume tier.

How does ShadowLock compare to other shadow AI tools?

ShadowLock covers three control layers in one product: the Windows endpoint, the managed Chrome/Edge browser, and the Microsoft 365 tenant via Microsoft Graph. Most MSP-channel tools we compare against work at one of those layers. See the comparison hub for side-by-side breakdowns against DefensX, ThreatLocker, DNSFilter, Control D, Conceal, Kipling Secure, and Microsoft Purview, each with links to the vendor documentation behind every claim.