Current product / Subscription plans

Pricing for the evidence workbench.

Choose the investigation capacity and team access you need. Each plan lists retention, upload allowances and optional-provider limits before checkout.

Read a sample client report

Explore the synthetic demo without an account or a card.

Annual: 12 months for the price of 10.

Start focused

Analyst

One analyst or a small team writing up incidents for their own organization or a handful of clients.

$149per month

  • 3 analyst seats
  • 50 investigations a month
  • 2 GiB of evidence uploads a month
  • 90 days of case retention after last activity
  • 14 days of original file retention
  • Branded client reports

Seats count the owner and unexpired pending invitations. AI and enrichment run only where a provider is configured. Plan terms

Optional provider allowances

200 AI prioritizations and 1,000 enrichment lookups per month. These are allowances, not evidence of configured or available providers.

File and processing limits

Up to 50 MiB per file and 512 MiB per case.

50 files per case; 3 concurrent processing jobs.

Start with Analyst

7-day evaluation for eligible organizations; card required, converts automatically.

For a growing MSP practice

Recommended

MSP Team

A managed service provider running investigations across a client base, with several people on cases.

$449per month

  • 10 analyst seats
  • 250 investigations a month
  • 5 GiB of evidence uploads a month
  • 120 days of case retention after last activity
  • 30 days of original file retention
  • Branded client reports

Seats count the owner and unexpired pending invitations. AI and enrichment run only where a provider is configured. Plan terms

Optional provider allowances

1,000 AI prioritizations and 10,000 enrichment lookups per month. These are allowances, not evidence of configured or available providers.

File and processing limits

Up to 50 MiB per file and 2,048 MiB per case.

100 files per case; 6 concurrent processing jobs.

Start with MSP Team

7-day evaluation for eligible organizations; card required, converts automatically.

Room for a larger team

MSP Scale

A larger provider or security team with a case a day and a longer window to keep evidence for disputes.

$1,199per month

  • 25 analyst seats
  • 1,000 investigations a month
  • 9 GiB of evidence uploads a month
  • 180 days of case retention after last activity
  • 60 days of original file retention
  • Branded client reports

Seats count the owner and unexpired pending invitations. AI and enrichment run only where a provider is configured. Plan terms

Optional provider allowances

5,000 AI prioritizations and 50,000 enrichment lookups per month. These are allowances, not evidence of configured or available providers.

File and processing limits

Up to 50 MiB per file and 8,192 MiB per case.

200 files per case; 12 concurrent processing jobs.

Start with MSP Scale

7-day evaluation for eligible organizations; card required, converts automatically.

Compare what changes

Plan for the cases you actually handle.

Compare seats, monthly investigations and retention. Each plan lists its published limits from the pricing API.

Evaluating PastePile for an MSP practice? Discuss a scoped pilot. No payment is taken by that inquiry.

Plan terms

Every plan includes branded client reports, AI prioritization, external enrichment and the full workbench.

AI requires a configured deployment provider. Enrichment requires a configured provider key, supplied by the deployment or your organization; provider availability and external account limits also apply. These entitlements do not guarantee that a provider is configured or reachable.

Seat limits include the owner and unexpired pending invitations. Owners reach every case and can limit each analyst to specific clients, with read or edit access.

Current enrichment configuration

GreyNoise: Configuration unverified; confirm key requirements before purchase.

Pulsedive: Configuration unverified; confirm key requirements before purchase.

VirusTotal: Configuration unverified; confirm key requirements before purchase.

urlscan.io: Configuration unverified; confirm key requirements before purchase.

These flags describe deployment configuration, not provider connectivity. If no deployment key is configured, your organization needs its own provider account and API key for that service. Any fees charged by your provider under your own account are separate. This public page does not inspect your organization's keys.

Processing, export and provider limits

Plan and deployment limits both apply. Large files can be refused or only partly analyzed; PDF, AI and enrichment depend on configured services. Review the limits below before purchase.

Processing and export limits

Analyst integrity bundles include a JSON report, evidence manifest and integrity digests, up to 64 MiB. Original artifacts are not included. These checks do not establish authorship or chain of custody; keep the bundle hash separately in a trusted record.

Each upload request is limited to 50 files and 256 MiB including request overhead. Each artifact is parsed up to 100,000 records within a 120-second parser budget. Exceeding a limit can produce a refusal or partial analysis; review parsing coverage.

Plan limits apply in addition to these deployment limits. The smaller applicable limit controls. Monthly investigation, upload, AI and enrichment allowances reset at the start of each calendar month in UTC, independently of your billing anniversary.

PDF and optional providers

PDF and client PDF need the PDF service to be configured and reachable. That service also limits the report request size, so large reports may need HTML, Markdown or JSON instead. Its deployment-specific maximum is not published here. Confirm that limit and suitability with a representative synthetic case before purchase.

External processing admits up to 8 simultaneous batches across this deployment and 2 per organization. Each batch performs lookups sequentially. Each external HTTP call has a 120-second total execution deadline, with HTTP operation timeouts of 120 seconds for AI and 10 seconds for enrichment. Responses are limited to 2 MiB after decompression; request bodies to 8 MiB, within a 12 MiB serialized request including headers and encoding. Provider limits and shorter applicable timeouts still apply. Busy capacity refuses new requests; these limits do not promise response times or availability.

AI and enrichment requests reserve allowance while running. Completed responses count toward usage. Interrupted requests with unknown provider outcomes retain a separate uncertain hold until support reconciles them. Settings shows these references; contact support before retrying an uncertain request.

AI and enrichment previews show what would be sent before confirmation. A failed or unavailable external service does not mean the requested result was produced. Check Settings for configuration and Subprocessors for provider data flows.

Start with a familiar case

See the report before you commit.

Open the demo first. For your own evaluation, use an authorized historical case, compare the findings with your existing write-up, and time the path to a report you would hand to a client.

Explore the sample report

7 days with your own evidence

A card is required. For an eligible organization, the selected subscription starts automatically when the evaluation ends unless you cancel beforehand. One evaluation per organization, with reduced allowances. A returning organization that has used its evaluation can be charged immediately.

Evaluation includes 2 seats, 10 investigations, 1 GiB of uploads, 25 AI prioritizations and 200 enrichment lookups. Case retention: 30 days; original files: 7 days.

Evaluation file limits: 50 MiB per artifact, 25 artifacts per case, 256 MiB per case and 2 concurrent analyses. Deployment processing limits also apply.

Discuss your evaluation with us

Size the work before choosing

Will your evidence fit?

Compare your expected workload with the published plan and upload limits. One GiB is 1,024 MiB.

Estimated uploads: 2.44 GiB per month. Allow extra room for unusually large cases and repeat uploads.

  • AnalystExceeds published limits
  • MSP TeamWithin checked limits
  • MSP ScaleWithin checked limits

Analyst

Exceeds published limits
Investigations per month
Within limit50 cases needed / 50 cases published
Uploads per month
Exceeds limit2.44 GiB needed / 2 GiB published
Largest case
Within limit100 MiB needed / 512 MiB published
Largest artifact
Within limit50 MiB needed / 50 MiB published
Upload request ceiling
Within limit50 MiB needed / 256 MiB published
Seats, including owner and pending invitations
Within limit3 seats needed / 3 seats published
Original file retention
Within limit14 days needed / 14 days published

MSP Team

Within checked limits
Investigations per month
Within limit50 cases needed / 250 cases published
Uploads per month
Within limit2.44 GiB needed / 5 GiB published
Largest case
Within limit100 MiB needed / 2,048 MiB published
Largest artifact
Within limit50 MiB needed / 50 MiB published
Upload request ceiling
Within limit50 MiB needed / 256 MiB published
Seats, including owner and pending invitations
Within limit3 seats needed / 10 seats published
Original file retention
Within limit14 days needed / 30 days published

MSP Scale

Within checked limits
Investigations per month
Within limit50 cases needed / 1,000 cases published
Uploads per month
Within limit2.44 GiB needed / 9 GiB published
Largest case
Within limit100 MiB needed / 8,192 MiB published
Largest artifact
Within limit50 MiB needed / 50 MiB published
Upload request ceiling
Within limit50 MiB needed / 256 MiB published
Seats, including owner and pending invitations
Within limit3 seats needed / 25 seats published
Original file retention
Within limit14 days needed / 60 days published

This is a sizing estimate, not a processing guarantee. Upload one file per request for this comparison; request overhead also uses the upload ceiling. File count, record count, parsing time, concurrent jobs, AI, enrichment and export limits still apply. Test a representative case and review the processing limits above. Organization settings can shorten retention. This compares a full monthly allowance, without existing usage.

Make the case for your team

What would the time be worth?

Use your own labor cost and estimated time saved. Then test those assumptions on a case you already know.

Illustrative estimates, not measured savings or a guarantee. Excludes onboarding, taxes and other costs. Time saved is capacity recovered, not necessarily cash saved.

Estimated monthly capacity value

$450

Analyst$149/month
2 hoursto cover the monthly subscription
MSP Team$449/month
6 hoursto cover the monthly subscription
MSP Scale$1,199/month
16 hoursto cover the monthly subscription

Know what fits

Clear limits.
Fewer surprises.

Choose for evidence volume and retention as well as case count. Your allowances are shared across the organization.

How much evidence can I investigate?

The monthly upload allowance and investigation allowance are separate limits. Reaching either can stop new work, even when you have room in the other. GiB is 1,024 MiB.

For illustration, 5 GiB holds about 100 uploads of 50 MiB each. That is a sizing example, not a promised case count: real cases can contain multiple files. Expand a plan's file limits to check your exports before choosing.

How long is evidence kept?

Original uploaded files have a shorter retention window than the case. Parsed evidence, findings and reports follow case retention after the last activity. Your organization's settings can shorten these windows. Export required records before they expire; check your client obligations before relying on a plan's retention.

What happens when I cancel?

New work stops when the subscription ends. Surviving cases remain readable and exportable within their retention windows. The downgrade grace period is 30 days. After it ends, the retained plan allows 60 days for cases after their last activity and 7 days for originals after upload; organization settings can shorten these windows. Cancellation does not stop scheduled retention deletion. Resubscribing restores access to surviving data; it cannot recover files already removed. Backups follow the separate cleanup described in Privacy.

What if I need more capacity or more time?

There is no permanent free plan or per-case overage billing. Tell us about your team, typical export sizes and retention needs before choosing a plan.

What can my team review before buying?

Inspect a complete synthetic client report and the underlying case, read our security boundaries, and review subprocessors and data handling. For procurement questions, contact us.