Two editions. One decision.
Community Edition is free forever for privileged-identity coverage. Professional Edition unlocks every identity and every surface — start with a 90-day free trial.
Community Edition
FreePrivileged-only insight, free forever.
- Dashboard, Identities, Findings, Roles, PIM
- Privileged identities only
- Daily sync
- Connect any number of tenants
- No credit card required
- Community email support
Professional Edition
Full coverageFull coverage for serious least-privilege.
Pricing details coming soon. Start with a 90-day free trial — no commitment during the trial period.
- All surfaces, all data
- Hourly sync
- API access
- Custom role export (ARM / Terraform)
- Full reports (PDF, CSV)
- Priority email support
- 90-day free trial included
One-time per customer. After 90 days, your account reverts to Community Edition unless you subscribe.
How are principals counted?
Principals are users, service principals, managed identities, agent identities, and groups that have role assignments in your connected tenants.
What does Community Edition include?
Community Edition covers privileged identities only — users and service principals with direct or inherited privileged role assignments. Dashboard, Findings, Roles, and PIM surfaces are all included, free forever.
What does Professional Edition include?
Professional Edition unlocks every identity type across all workload surfaces — Intune, Exchange, Purview, Defender, SharePoint, Teams, and more. Hourly sync, API access, full reports, and priority support included.
Can I extend my trial?
Yes — reach out from the in-app Settings page and we’ll review case-by-case.
What each edition includes
Coverage scope, retention window, and API access are what determine whether Permafrost fits your programme — not just the price.
| Capability | Community Edition | Professional EditionFull coverage |
|---|---|---|
| Identity coverage | Privileged only | All identities |
| Principal cap | Unlimited (privileged) | All principals |
| Sync cadence | Daily | Hourly |
| Privileged sign-in ingest | Full | Full |
| Non-privileged sign-in ingest | — | Available |
| Directory audit ingest | Privileged-related | Curated + privileged-target |
| Aggregate dashboard tiles | Privileged tiles only | Full |
| Retention window | 7 days | 30 days+ |
| IR backfill (operator-mediated) | — | 30-day window |
| Raw-event export | — | CSV |
| Right-sized role export | Included | Included |
| API access | Not included | Included |
| Support | Community email | Priority email |
| Card required | Not included | Not during trial |