Assume the trusted app is already compromised. Prove and cut what it left behind.
Lab is free. Production leftover-trust is not.
After the breach and the rotation, we cut leftover access and prove it bounced. Demo inventory and receipt-bar practice stay free. Live Residual Trust Assurance — connectors, dual-control, kill receipts as a production control — is a subscription. Meter is organization + connectors + operator seats, not per-employee IdP seats and not per-cut. We do not punish operators for cutting leftover trust.
Honesty before the table
- Trust is a kill receipt after failed-replay or absence bounce — not a compliance badge LingerCut does not hold.
- VALID only on bounce. WITHHELD means the leftover is still live.
- Not SOC 2, FedRAMP, or ISO certified. Do not buy us as a checkbox.
- Lab is free. Production leftover-trust is not.
- hello@lingercut.com is the brand address. Mailbox MX is not live yet — requests also go through in-app Support. Open Support.
Public list pricing
Lab
Free
Founder practice, demos, stranger path.
Includes
- Demo inventory cuts (
lc_*) - Operator guide
- False-green battery teaching
- Operator lock when you set a password
Not included
- Live Google / Microsoft / GitHub / AWS / Entra cuts as a paid production control
- No SLA
RecommendedPilot
$599/mo or $6,490/yr
First paying design partners. Default first purchase.
Includes
- 1 org
- 1 live connector beachhead (GitHub org NHI recommended)
- Kill receipts, dual-control, evidence ZIP
- Written as a pilot — not a SOC 2 SLA
Not included
- Isolated probe not promised
- Not multi-tenant MSSP
IR defaultTeam / IR
$1,990/mo or $19,900/yr
IR + identity + DevOps after the incident window.
Includes
- Up to 3 live connectors
- Playbooks / campaigns
- Dual-control, receipts, evidence packs
- Incident surge as custom, if you need it
Not included
- Sovereign Docker
- Isolated probe plane
Sovereign
$59,900/yr + $12,500 onboarding
Critical infra that cannot run leftover-trust on shared Vercel. Talk to us.
Includes
- Docker on customer VPC
- Isolated probe required in this tier
Not included
- Shared SaaS as the production control plane
How we meter
Organization + connectors + operator seats. Not per-employee IdP seats. Not per-cut. Password managers charge for vault users; LingerCut charges for the leftover-trust plane you actually run. Cutting more grants does not raise the bill.