---
title: "Pricing"
description: "Compare the Free, Essentials, Pro, and Enterprise editions of Pulumi Cloud."
url: "https://www.pulumi.com/pricing/"
image: "https://www.pulumi.com/assets/og/pricing.png"
---

# Pricing

Compare the Free, Essentials, Pro, and Enterprise editions of Pulumi Cloud.

## Free

Get started with Pulumi-managed infrastructure at no cost.

**$0** (No credit card required)

Includes:
- 1 user
- IaC state management
- Pulumi Deployments
- Basic Pulumi ESC
- Unlimited projects, stacks, and environments
- Unlimited updates and history
- Up to 500 workflow minutes

## Essentials

Managed infrastructure fundamentals for your whole team.

**$40 /month** — **Includes 40 Credits** (Up to 500 managed resources.)

Everything in **Free**, plus:
- Unlimited users
- Secure collaboration and CI/CD
- Neo code reviews and Slack integration
- Resource Search and Property Search
- OIDC and org access tokens
- Webhooks
- Automatic secrets rotation
- Policy results in advisory mode
- Service-level objectives, an uptime commitment, and support tickets

## Pro

Automation and built-in governance for growing organizations.

**$400 /month** — **Includes 400 Credits** (Up to 2,000 managed resources.)

Everything in **Essentials**, plus:
- SAML/SSO and advanced RBAC
- Organization-managed policy enforcement
- Preventative policies
- Custom policy packs
- Neo scheduled tasks
- Internal developer platform (IDP)
- Audit logs
- Drift detection and remediation
- Time-to-live stacks
- Customer-managed keys

## Enterprise

Compliance, control, and governance for at-scale operations.

**$2,000 /month** — **Includes 2,000 Credits** (Up to 4,750 managed resources.)

Everything in **Pro**, plus:
- Self-hosting available
- Conformance packs for CIS, CIS Kubernetes, CMMC, HITRUST, ISO 27001, NIST, and PCI DSS
- Automatic group & user sync (SCIM)
- Automated audit log export
- Unlimited custom policy packs
- Policy remediation
- Contract pricing and invoicing

## Edition comparison

### Infrastructure as Code

| | Free | Essentials | Pro | Enterprise |
|---|---|---|---|---|
| Managed resource pricing | Free | $0.00025/hour ($0.1825/month) | Starting at $0.0005/hour ($0.365/month) | Starting at $0.00075/hour ($0.5475/month) |
| Commitment pricing | — | — | ✓ | ✓ |
| Self-hosting | — | — | — | ✓ |
| Updates | Unlimited | Unlimited | Unlimited | Unlimited |
| Concurrent stack updates | 1 | 5 | Unlimited | Unlimited |
| Restore deleted stacks | — | — | ✓ | ✓ |
| Update history | ✓ | ✓ | ✓ | ✓ |
| REST API | ✓ | ✓ | ✓ | ✓ |
| Automation API | ✓ | ✓ | ✓ | ✓ |
| Pulumi-service provider | ✓ | ✓ | ✓ | ✓ |
| Developer portal | Host public templates | Host public templates | Host private templates | Host private templates |

### Deployments & workflows

| | Free | Essentials | Pro | Enterprise |
|---|---|---|---|---|
| CI/CD integrations | ✓ | ✓ | ✓ | ✓ |
| Drift detection | — | — | ✓ | ✓ |
| Time-to-live stacks | — | — | ✓ | ✓ |
| Scheduled deployments | — | — | ✓ | ✓ |
| GitHub Enterprise Server support | — | — | — | ✓ |
| GitHub Enterprise Cloud with data residency support | — | — | — | ✓ |
| Webhooks | — | ✓ | ✓ | ✓ |

### Secrets & Configuration

| | Free | Essentials | Pro | Enterprise |
|---|---|---|---|---|
| On-demand secret price | 25 free | $0.000685/hour ($0.50/month) | $0.001/hour ($0.75/month) | $0.00137/hour ($1.00/month) |
| Price per plaintext config | Free | Free | Free | Free |
| Price per 10K API calls | 10K free | $0.10 | $0.10 | $0.10 |
| Commitment pricing | — | — | ✓ | ✓ |
| Self-hosting | — | — | — | Available |
| Max # of secrets | 25 | Unlimited | Unlimited | Unlimited |
| Max # of API calls | 10K / month | Unlimited | Unlimited | Unlimited |
| Version history | — | ✓ | ✓ | ✓ |
| Version tags and import by tags | — | ✓ | ✓ | ✓ |
| Dynamic credentials | ✓ | ✓ | ✓ | ✓ |
| Dynamic secrets | ✓ | ✓ | ✓ | ✓ |
| Rotated secrets | ✓ | ✓ | ✓ | ✓ |
| Database secrets rotation | ✓ | ✓ | ✓ | ✓ |
| Database secrets rotation in private networks | — | — | ✓ | ✓ |
| Customer-managed keys | — | — | ✓ | ✓ |
| Integrations - sync | ✓ | ✓ | ✓ | ✓ |
| Multi-language SDKs | ✓ | ✓ | ✓ | ✓ |

### Discovery & governance

| | Free | Essentials | Pro | Enterprise |
|---|---|---|---|---|
| On-demand resource price | Free | $0.000025/hour ($0.0185/month) | Starting at $0.00005/hour ($0.0365/month) | $0.000075/hour ($0.05475/month) |
| Workflow cost per minute / included per month | 500 free | $0.01 | $0.01 / Custom | $0.01 / Custom |
| Resource search | — | ✓ | ✓ | ✓ |
| Cloud account discovery | — | ✓ | ✓ | ✓ |
| Primary accounts | — | 1 | 10 / Custom | Custom |
| Data export | — | — | ✓ | ✓ |
| Property search | — | ✓ | ✓ | ✓ |
| Policy enforcement | Manual | Advisory only | [Organization-managed](/docs/discovery-governance/get-started/enforce-policy-as-code/) | [Organization-managed](/docs/discovery-governance/get-started/enforce-policy-as-code/) |
| Preventative policies | Manual | — | ✓ | ✓ |
| Audit policies | — | ✓ | ✓ | ✓ |
| Pre-built policy packs | — | Pulumi Best Practices, AWS Organizations Tag Policies | Pulumi Best Practices, AWS Organizations Tag Policies | Pulumi Best Practices, AWS Organizations Tag Policies, CIS, CIS Kubernetes, CMMC, NIST, HITRUST, PCI DSS, ISO 27001 |
| Custom policy packs | — | — | Up to 10 packs (No policy-count limit) | Unlimited |
| Enforcement modes | — | Advisory | Advisory and Mandatory | Advisory, Mandatory, and Remediation |

### Infrastructure AI

| | Free | Essentials | Pro | Enterprise |
|---|---|---|---|---|
| Pulumi Neo | — | $3/M tokens | $3/M tokens | $3/M tokens |
| Neo in the CLI | — | ✓ | ✓ | ✓ |
| MCP & CLI Integrations | — | ✓ | ✓ | ✓ |
| Neo code reviews | — | ✓ | ✓ | ✓ |
| Slack integration | — | ✓ | ✓ | ✓ |
| Scheduled tasks | — | — | ✓ | ✓ |
| Bring your own model provider | — | — | — | ✓ |

### Administration

| | Free | Essentials | Pro | Enterprise |
|---|---|---|---|---|
| Members | 1 | Unlimited | Unlimited | Unlimited |
| Admins | — | Unlimited | Unlimited | Unlimited |
| Organizations | — | 1 | Multiple supported | Multiple supported |
| Identity providers | GitHub, GitLab, Atlassian | GitHub, GitLab, Atlassian | GitHub, GitLab, Atlassian, SAML/SSO | GitHub, GitLab, Atlassian, SAML/SSO |
| SAML/SSO | — | — | Many | Many |
| SCIM integration | — | — | — | ✓ |
| OIDC support | ✓ | ✓ | ✓ | ✓ |
| Create and manage teams | — | — | ✓ | ✓ |
| Role-based access control (RBAC) | — | — | ✓ | ✓ |
| Custom roles | — | — | Up to 25 | Unlimited |
| Tag-based access control | — | — | ✓ | ✓ |
| Assign custom roles to users and teams | — | — | ✓ | ✓ |
| Organization and team access tokens | — | ✓ | ✓ | ✓ |
| Audit logs | — | — | ✓ | ✓ |
| Automated log export to S3 and Microsoft Sentinel | — | — | — | ✓ |
| Customer-managed runners | — | — | — | ✓ |

### Support

| | Free | Essentials | Pro | Enterprise |
|---|---|---|---|---|
| Service-level objectives | — | ✓ | ✓ | ✓ |
| Uptime commitment | — | ✓ | ✓ | ✓ |
| Support agent & ticket submission | ✓ | ✓ | ✓ | ✓ |
| Standard support | — | — | — | Included with a contract of at least one year |
| Community Slack | ✓ | ✓ | ✓ | ✓ |

## Cost estimation

An estimate at list prices, excluding taxes, committed-use discounts, and volume pricing. All usage draws from one shared pool of Pulumi Credits, where 1 credit costs $1 USD.

**Essentials** — $40/month base, which includes 40 credits and covers up to 500 IaC resources.

| Unit | Rate |
|---|---|
| IaC resource, per month | $0.1825 |
| ESC secret, per month | $0.50 |
| Discovered resource, per month | $0.0185 |
| Workflow minute | $0.01 |
| 1M Neo tokens | $3.00 |

**Pro** — $400/month base, which includes 400 credits and covers up to 2,000 IaC resources.

| Unit | Rate |
|---|---|
| IaC resource, per month | $0.365 |
| ESC secret, per month | $0.75 |
| Discovered resource, per month | $0.0365 |
| Workflow minute | $0.01 |
| 1M Neo tokens | $3.00 |

**Enterprise** — $2000/month base, which includes 2,000 credits and covers up to 4,750 IaC resources.

| Unit | Rate |
|---|---|
| IaC resource, per month | $0.5475 |
| ESC secret, per month | $1.00 |
| Discovered resource, per month | $0.05475 |
| Workflow minute | $0.01 |
| 1M Neo tokens | $3.00 |

The rates above are per whole month. IaC resources, ESC secrets, and discovered resources are really billed by the hour, so anything that exists for only part of the month costs proportionally less. The base price covers the included resource count, and usage beyond the included credits is billed on demand. Past about 4,750 IaC resources, volume pricing usually applies, so figures computed from the rates above are an upper bound rather than a quote — [contact sales](/contact/?form=sales) for what it would actually cost at that size. An interactive estimator is at /pricing/#calculator.

## Frequently asked questions

### Pricing

**Do I pay as I go, or prepaid up-front?**

The Essentials, Pro, and Enterprise editions are available month to month with a credit card. You will be charged an up-front fee at the beginning of each monthly term. The up-front fee will create a pool of Pulumi Credits. Unused monthly credits expire at the end of each monthly term. If your usage exceeds your Pulumi Credit pool, you will be billed in arrears for your usage at the end of the monthly term.

Annual commitment pricing is available on Pro and Enterprise only. [Contact sales](/contact/?form=sales) to receive a discount for a committed amount of usage paid up-front. If you subsequently consume all up-front purchased usage, you will be billed in arrears as you go beyond that amount of usage. The details are specified in your contract.

**What are Pulumi Credits?**

Pulumi Credits are the single currency for Pulumi Cloud. One Pulumi Credit costs $1 USD, and you can pre-purchase Pulumi Credits as needed to cover expected usage through a monthly up-front fee or, on Pro and Enterprise, an annual agreement. All usage of Pulumi services will draw from the pool of Pulumi Credits at the rates above or as listed on your order form. Once the pool of Pulumi Credits is exhausted, you'll be billed in arrears for additional use at the rates above or as listed on your order form.

**How are IaC resources billed?**

IaC resources are billed hourly at the rate of $0.00025 for Essentials ($0.1825 per resource per month) and starting at $0.0005 for Pro ($0.365 per resource per month). These hourly rates cover managing a resource for a full hour.

Pro receives volume discounts, so the incremental rate decreases as resource use increases.

Enterprise starts at $2,000/month, with 2,000 Pulumi Credits covering up to 4,750 managed resources. Additional IaC resources start at $0.00075 per resource-hour ($0.5475 per resource per month). Enterprise is available month to month, or you can [contact sales](/contact/?form=sales) for contract pricing.

For billing purposes, a partial resource hour used is billed as a full hour and we count any resource that's declared in a Pulumi program. This includes [provider resources](/docs/iac/concepts/resources/) (e.g., an Amazon S3 bucket), [component resources](/docs/iac/concepts/components) which are groupings of resources (e.g., an Amazon EKS cluster), and [stacks](/docs/iac/concepts/stacks) which contain resources (e.g., dev, test, prod stacks).

**What can I do with 500 IaC resources per month?**

The Essentials edition includes up to 500 IaC resources to get started with.

You could manage 500 EKS clusters or EC2 instances for a month using this amount. As another example, you could manage something more complex like a production Amazon EKS cluster with associated IAM roles, VPC, subnets, gateway route tables, and a small microservice deployed into the cluster.

This is more than enough to get started with production workloads. The Pro edition includes up to 2,000 resources.

**How do I find out how many IaC resources I have?**

There are several ways you can estimate the number of resources you have managed with Pulumi.

- <u>If you are using Pulumi Cloud</u>: Navigate to the dashboard and review the resource graph titled “Resource Count over Time.”

- <u>If using Pulumi with a DIY backend</u>: Export your stack state and count the number of lines with a universal resource name (URN). You can pipe the state through a grep command for "urn" to estimate the number of resources.

- <u>If you haven't deployed anything with Pulumi</u>: See the previous FAQ for a few examples of applications and their number of resources.

**What are some examples of how many IaC resources are needed for my use case?**

[**Serverless API with Amazon API Gateway and AWS Lambda**](https://github.com/pulumi/examples/tree/master/aws-ts-apigatewayv2-http-api)
(Estimated resources: 9)

This scenario is a stack with an Amazon API Gateway, an AWS Lambda event handler, and associated IAM roles.

[**Amazon EKS running in a VPC**](https://github.com/pulumi/examples/tree/master/aws-py-eks)
(Estimated resources: 20)

This scenario is a stack with an Amazon VPC (including subnets, internet gateway, security groups, and route table), Amazon EKS cluster and node group, and associated IAM roles.

[**Amazon ECS cluster and RDS backend running in a VPC**](https://github.com/pulumi/examples/tree/master/aws-py-wordpress-fargate-rds)
(Estimated resources: 24)

This scenario is a stack with an Amazon VPC (including subnets, security groups, and route table associations), Amazon ECS (including cluster and service, load balancer resources, and IAM resources), and Amazon RDS (including RDS instance and subnet group). Each group of resources (VPC, ECS, RDS) is represented by a component resource.

**How are ESC secrets billed?**

ESC secrets are billed hourly at the rate of $0.000685 for Essentials ($0.50 per secret per month), $0.001 for Pro ($0.75 per secret per month), and $0.00137 for Enterprise ($1.00 per secret per month). This is the cost of managing an ESC secret for a full hour.

For example, if you have your secrets stored for 4 days on the Pulumi Cloud Essentials edition, the price you pay would be 4 x 24 x 0.5 / 730 = $0.0657

Secrets include both static secrets and dynamic secrets/credentials. When using the Pulumi ESC Document Editor, each definition of fn::secret:* and fn::open::* (except Pulumi-stacks provider) is counted as a secret. The number of secrets only from the latest environment revision is counted towards your billing.

**How are ESC secrets API calls metered?**

You pay $0 for the first free 10K API calls / month to the [ReadOpen API](/docs/reference/cloud-rest-api/environments/) endpoint. Once you hit 10,000 API calls, you are metered at $0.1 for 10K API calls. For example, 15,000 API calls in a month include 10,000 free calls and 5,000 billable calls, costing $0.05.

API usage includes any calls from the [CLI](/docs/iac/cli/commands/pulumi_env/), [SDK](/docs/esc/languages-sdks/), [Pulumi Cloud provider](/registry/packages/pulumiservice/api-docs/environment/), direct [REST API](/docs/reference/cloud-rest-api/environments/) call that hits the ReadOpen API endpoint

**What are workflow minutes?**

Workflow minutes represent the total time used across both Discovery and Deployments. All usage draws from a single, shared pool of minutes. For Discovery, workflow minutes measure the time spent on discovery and policy execution. Deployments also consume workflow minutes by measuring the duration of each deployment process.

**Can I buy more Pulumi Credits?**

Customers on the self-service Essentials and Pro editions can buy discounted credit top-ups in Pulumi Cloud. Self-service top-ups are not yet available for contracted credit pools. Annual commitments are available on Pro and Enterprise only; [contact sales](/contact/?form=sales) to discuss commitment pricing.

**What are Neo tokens?**

Neo tokens are the metering method for Neo-powered features (Neo tasks, pull-request annotations, and natural-language search) and cost $3 per million tokens. The volume of tokens used by any given activity varies with the number, complexity, and duration of Neo activities.

**Can I use my own model provider key with Neo?**

Yes. The Enterprise edition includes bring your own key (BYOK) for Neo. Organizations on the legacy Business Critical edition also have access. Neo currently supports Anthropic's Claude models. Your model provider bills you directly for BYOK model usage, and Pulumi does not charge Neo tokens for those requests. Other Pulumi usage remains subject to your edition's pricing and contract. See [Bring your own model provider](/docs/ai/neo/model-providers/) for setup instructions.

**Can I manage Neo usage for my organization?**

Neo features can be managed in the Pulumi Cloud dashboard under Settings → Neo Settings. Neo integration with your version control system is located under Management → Version Control.

### Product

**What are Pulumi open source and Pulumi Cloud?**

Pulumi's Infrastructure as Code CLI and SDK are an open-source project that is supported by an active community. [Pulumi Cloud](/product/) is a managed service for the open source CLI and SDK. It tracks your infrastructure’s state and coordinates updates with the CLI, which creates or updates resources to reach your infrastructure’s desired state. It also manages secrets, supports SAML SSO, integrates with CI/CD pipelines, enforces compliance rules, and much more.

You're not required to use Pulumi Cloud. You can use any cloud or on-premises storage to build and run your own backend.

**Can I use Pulumi for free?**

Yes. There are two ways to use Pulumi for free.

First, the Pulumi Cloud Free edition costs nothing and supports one user. It includes automatic state management, Pulumi Deployments, basic Pulumi ESC, unlimited projects and stacks, and unlimited updates and history. It does not limit the number of managed resources. It does not include Pulumi Neo, Resource Search, or Property Search.

Second, Pulumi is an [open-source project](https://github.com/pulumi/pulumi). You can [run Pulumi entirely offline](/docs/iac/concepts/state-and-backends#using-a-diy-backend) without the online service's features, and manage state yourself, instead of using the online service. There are no restrictions — it's all there in the open for you to use freely as you'd like.

**What is an organization? What are projects and stacks?**

The Free edition is great for single users with private projects. However, if you are working within a team, you'll typically want to share your projects, for which you need to create an organization. The Essentials edition is designed for teams to collaborate on shared infrastructure projects. The Pro edition offers more sophisticated organization management facilities, including RBAC for advanced policy controls.

Pulumi [projects](/docs/iac/concepts/projects/) and [stacks](/docs/iac/concepts/stacks/) are a way to organize Pulumi code. You can consider a Pulumi project to be analogous to a GitHub repo: a single place for code — and a stack to be an instance of that code which has a separate configuration. For instance, a single project may have multiple stacks for dev, test, prod, or perhaps for different cloud configurations (e.g., geographic region) or developer environments.

**How do I get started?**

Follow the [Getting Started guide](/docs/get-started/), which walks you through creating and deploying your first Pulumi project.

**How do I move off the legacy Starter and Pro SKUs?**

These legacy plans are separate from the current Pro edition. We recommend moving off them to get access to our latest capabilities like Pulumi Deployments, Discovery, and Neo. [Contact us](/contact/?form=sales) to move to a current edition.

**Is Pulumi SOC 2 compliant?**

Yes, Pulumi has completed the SOC 2 Type 2 compliance process. Pulumi is committed to operational excellence for our customers.

**Can I host Pulumi Cloud in my cloud or datacenter?**

Yes, we offer a self-hosted Pulumi Cloud for companies that have specific data control requirements and want to maintain complete control over hosting Pulumi Cloud. This option is available in the Enterprise edition. You can [request a Proof of Concept (PoC)](/product/self-hosted/#self-hosted-trial) to get started.

**How do I convince my boss?**

Do you want to use Pulumi in your organization, but aren't sure how to bring it up with your boss? We've created a sample email to help you explain its benefits. Feel free to use the full letter or pieces of it. We are always happy to meet to learn more about your needs and explain these benefits in person — just [contact us](/contact/?form=sales).

**Sample Email**

>Dear {Name},
>
>I'd like to propose that we use Pulumi for our cloud infrastructure needs. I've researched the top infrastructure as code platforms, and Pulumi stands out because of its maturity, strong open source community, support for many clouds, and mix of productivity and enterprise controls, meaning it works great for developers and infrastructure teams alike.
>
>I discovered that Pulumi's community is over 10,000 people and growing, and their customer base includes a diverse array of companies, from startups to some of the largest Fortune 500 and Global 2000 organizations. The top four reasons people are choosing Pulumi are 1) it tames cloud complexity and reduces infrastructure risks, 2) it lets teams use software engineering best practices with infrastructure, 3) it helps teams adopt modern cloud architectures, and 4) it increases collaboration between infrastructure teams, developers, and security engineers.
>
>Here are some examples of their customers to give you an idea of who is using it and why:
>
>- [BMW](/customers/bmw/) and Fenergo can now release new features faster by empowering their developers to deploy cloud infrastructure easily.
>- [Snowflake migrated to](/customers/snowflake/) Kubernetes across multiple clouds in three months.
>- [Mercedes-Benz](/customers/mercedes-benz/) Research & Development North America improved collaboration between its infrastructure and application development teams.
>- [Skai](/blog/kenshoo-migrates-to-aws-with-pulumi/) managed a complex public cloud migration project.
>- [Wiz](/customers/wiz/), [Supabase](/customers/supabase/), and [Lemonade](/customers/lemonade/) created innovative engineering cultures.
>
>Pulumi is open source and has a SaaS product that helps organizations like ours manage infrastructure with advanced security and policies. Because it's a SaaS, we can start small and grow as our success with the product grows.
>
>You can learn more on the Pulumi website or view a short introduction video.
>
>I have many ideas on how Pulumi would deliver immediate value to our team. Should I write a more detailed proposal and share it with you or other members of the team for feedback? The Pulumi team has also offered to have a meeting with us to learn more about our use cases, and discuss potential ways we can work together. Should I set that up?
>
>Thanks,
>
>{Your Name}

### Billing and Support

**How can I keep track of my usage?**

You can keep track of current usage and upcoming charges by navigating to Settings and then Billing & Usage in the Pulumi Cloud console.

**When will I be billed for a self-service paid edition?**

In addition to your monthly up-front fee, you will be billed for the previous month’s on-demand usage on the first day of each month.

**What payment options do you accept?**

Self-service Essentials, Pro, and Enterprise subscriptions use a credit card. Annual contracts are available on Pro and Enterprise only. [Contact sales](/contact/?form=sales) for contract payment options.

**What if I have billing or account issues?**

For any billing or related issues, please [contact us](/contact/).

**What if I am not satisfied with my Pulumi purchase?**

If you're not satisfied with Pulumi, we offer a 14-day money-back guarantee, no questions asked. [Contact us](/contact/).

**How do I get support for Pulumi?**

Every edition includes access to the support agent and ticket submission. Essentials, Pro, and Enterprise customers can purchase Standard or Bronze support. Standard is included with Enterprise contracts of at least one year. Self-hosted customers require Platinum support. [Compare support plans](#support-plans) for prices, coverage, and response objectives.

**Does Pulumi charge sales tax?**

You may be charged a sales tax in addition to your usage fees in certain jurisdictions. It will be a separate line item on your bill.