Enterprise ships as four self-hosted installation tiers. Lite is free and open source. Cloud is the managed console — we host the manager; collectors run on developer laptops.
Full fleet control plane on your infrastructure. Each tier includes everything in the tiers below it — enforced server-side, not just in the UI.
Foundation
Everything you need to start — ingest, dashboard, and live fleet visibility.
Includes:
FinOps & reporting
Fleet-wide cost analytics, executive reports, and extended collector support.
Everything in Core, plus:
MCP, ClickHouse & OTel
IDE integrations, analytics at scale, and advanced fleet tooling.
Everything in Analytics, plus:
Enterprise scale on-prem
Maximum scale — push ingest, object archive, and git enterprise on your infrastructure.
Everything in Integration, plus:
Cloud Scale is the highest self-hosted tier (push ingest, object archive) — separate from RetrySight Cloud, the managed SaaS product.
Tier-gated capabilities for platform, security, and FinOps teams.
| Feature | Tier 1 Core | Tier 2 Analytics | Tier 3 Integration | Tier 4 Cloud Scale |
|---|---|---|---|---|
| Identity & access | ||||
| SSO (OIDC / SAML) Encrypted IdP config at rest; superuser group maps to SECADMIN. | ||||
| Secadmin break-glass Config-file emergency access when SSO is unavailable. | ||||
| API key management HMAC-SHA256 hashes with dual-key grace window on rotation. | ||||
| Role-based access UI, ADMIN, and SECADMIN roles gate reports and admin routes. | ||||
| Session replay protection Replay exports require UI JWT — agent keys cannot exfiltrate prompts. | ||||
| Data & compliance | ||||
| Self-hosted deployment Full stack inside your network — no third-party SaaS in the telemetry path. | ||||
| BYO RDBMS PostgreSQL default; MySQL and SQL Server best-effort; Oracle DBA-assisted. | ||||
| Retention purge Scheduled task-event purge with configurable retention days. | ||||
| Local archive Scheduled archive jobs to local filesystem destinations. | ||||
| Network archive Archive destinations on network paths for shared retention stores. | ||||
| Object archive (S3/GCS/Azure) Cloud-scale object sinks for long-term retention workflows. | ||||
| Privacy redaction Redact project roots and full prompts in stored telemetry. | ||||
| Analytics & scale | ||||
| ClickHouse dual-write Optional analytics column store; Postgres remains OLTP. | ||||
| Cost & FinOps views Spend by model, user, and tool; contract cost review. | ||||
| Contract cost apply Apply approved pricing units to the live cost registry. | ||||
| Executive reports Scheduled and on-demand PDF exports for leadership. | ||||
| Git context capture Associate sessions with repository and branch context. | ||||
| Git context query Query and advanced git context beyond capture-time columns. | ||||
| Git enterprise Project-root redaction and enterprise privacy controls. | ||||
| Integrations | ||||
| MCP server IDE-native tools for Cursor, VS Code, and Kiro. | ||||
| SSO source-tools API Source-tool registry API for SSO-aware tool configuration. | ||||
| OpenTelemetry ingest Claude Cowork and OTel agents via /api/v1/otel. | ||||
| Insights chat Natural-language fleet queries via local Ollama with fallback. | ||||
| GraphQL subscriptions Live taskUpdated and agentHeartbeat streams. | ||||
| Push ingest Outbound-only network path for agent telemetry. | ||||
| Operations & admin | ||||
| Tier gating FeatureGateService enforces capabilities server-side. | ||||
| Ingest rate limiting Configurable SECURITY_INGEST_RPM on the manager. | ||||
| Evaluations Eval definitions, runs, annotation queue, and playground. | ||||
| Eval experiments A/B eval experiment runs for measuring agent quality. | ||||
| Traces & patterns OTel span views and topic clustering for fleet patterns. | ||||
| Admin consoles SSO and API key management from SECADMIN routes. | ||||
| Archive admin Retention and archive policy from SECADMIN routes. | ||||
| Multi-tenant org support Organization scoping for fleet segmentation. | ||||
Included in tier Upgrade required
Lite, Cloud, and Enterprise — pick the model that matches how your team ships.
Local-first desktop app for individual developers. In-process collectors, no Docker, no fleet manager.
Managed fleet observability for small and medium teams. We host the manager and dashboard; agents run on developer laptops.
Full fleet control plane on your network. Four installation tiers from core ingest to cloud-scale archive and push ingest.
Free desktop app for solo developers — installers for macOS, Windows, and Linux.
Go to Lite downloads
RetrySight