Tirith is free for everyone with 80+ detection rules and MCP integration. Need enterprise features? Contact us for a custom plan.
Tirith is open source and free to use. If it helps protect your workflow, consider sponsoring the project on GitHub to help sustain development.
Sponsor on GitHub| Feature | Community | Team / Enterprise |
|---|---|---|
| Detection Rules (80+) | ||
| Shell Hooks (Bash, Zsh, Fish, PS) | ||
| MCP Server | ||
| Local JSONL Audit Log | ||
| YAML Policy System | ||
| SARIF Output (CI/CD) | ||
| MITRE ATT&CK Mapping | ||
| Remote Policy Distribution | ||
| Remote Audit Collection | ||
| Custom DLP Redaction | ||
| Custom Detection Rules | ||
| Webhooks (Slack, Teams, PagerDuty) | ||
| SSO / SAML | ||
| License Management | ||
| Air-Gapped / On-Prem | ||
| Custom Rule Development | ||
| Dedicated Account Manager | ||
| SLA & Response Guarantees |