Free to find it. Priced to fix it.
The audit is free forever. Team is 20% of what opsen saves you, each saving for its first year, then all yours. Nothing saved, nothing billed. Enterprise brings volume pricing on an annual agreement.
See exactly what you waste.
- Weekly audits of one or more organisations
- Every finding, figure and basis line
- Spend map, people and repositories
- Read-only links and report JSON
- Single sign-on, roles and audit log
30 days free, no card. Then each saving is billed for its first 12 months, and is all yours after. Nothing saved, nothing billed.
- Everything in Free
- One-click reclaims and cancellations
- Autopilot that asks each person first
- Fix pull requests, linted in a sandbox
- Every change logged with its approver
Volume pricing, invoiced, with the review your security team runs.
- Everything in Team
- Savings share down to 15% at volume
- Invoiced billing and procurement
- Security review support and DPA
- Onboarding with an engineer
- Dedicated support: named engineer, shared channel, 1-hour urgent response
What opsen costs you.
Set your numbers. The fee is the lower of the two, every month.
Not sure what share goes unused? The free audit measures it, line by line, in your own billing.
Compare plans.
| Free | Team | Enterprise | |
|---|---|---|---|
| Weekly audits | |||
| Spend map and recommendations | |||
| Contract prices | |||
| Read-only links and JSON | |||
| Reclaim Copilot seats | |||
| Cancel invitations | |||
| Disable dormant schedules | |||
| Fix pull requests | |||
| Claude Code attribution | |||
| Billed only on verified savings | |||
| Annual commitment and invoicing | |||
| Single sign-on (SAML 2.0, OIDC) | |||
| Roles, access export and audit log | |||
| DPA and security review | |||
| Support | Email, 2 business days | Priority, 1 business day | Dedicated, 1 hour for urgent |
Questions.
Is the audit really free?
Yes. Install the app, get the full report, keep getting it weekly. You pay only when you want opsen to act for you.
Is opsen free for open source?
Yes. An organisation whose repositories are all public gets every action, fix pull requests included, at no charge. opsen checks at each audit; adding a private repository moves it to the usual plan.
Why a share of savings?
Because then opsen only earns when you do. The fee is 20% of the monthly value of the changes it applied, so it is always a fraction of money you can see in your own bill, and it never exceeds what it saves.
Do we pay forever for one cleanup?
No. Each change is billed for its first 12 months. After that it keeps saving and is never billed again. What you pay for after the first year is the new waste opsen keeps finding: idle seats from new hires, people who leave, workflows that start burning minutes.
What counts as saved?
The monthly value of each change opsen applied that is still in effect: a reclaimed Copilot seat at its price, a cancelled invitation at the seat price, a fix pull request at the CI minutes it removes. Each value comes from the audit that found it and is shown in your activity log.
What if opsen saves nothing?
Then you pay nothing. No minimum, no platform fee, no seats.
Do we pay per seat?
No. Seats never appear on the invoice. Adding engineers never adds a licence.
Does opsen read our code?
No. It reads workflow files to propose fixes, and billing and activity data. Never application source.
Can we cancel?
At any time, from billing settings. You drop back to Free and keep your reports.
Which tools does opsen read?
GitHub seats, Copilot and Actions; GitLab, on gitlab.com or self-managed, including Duo; Azure DevOps and Visual Studio subscriptions; Jira, Confluence, Service Management and Bitbucket; JetBrains IDE licences; CircleCI; Claude Code, Cursor and the OpenAI API, including Codex. GitHub is read through the app; the others with an admin key you add in settings: read-only is enough for the audit, and changes need one that can write. Teams without GitHub start a workspace and connect their platforms to it.
Where does opsen run?
As a hosted service in the EU. It reads GitHub with tokens that expire within the hour and stores every key encrypted with AWS KMS. The security page has the detail.
Built for enterprise.
Nothing changes until an owner approves, with the controls your security review asks for.
Open the trust centre→Okta, Microsoft Entra ID, Google Workspace or any SAML 2.0 or OIDC provider, required for everyone if you choose.
Every sign-in, access change, setting and action, with who, when and from where. Stream it to your SIEM.
Owners verified with GitHub at every sign-in. Admins and viewers from your provider. Export who has access.
A named engineer and a shared Slack or Teams channel. Urgent issues answered within the hour.
Stop paying for what nobody uses.
opsen re-audits every week and keeps taking it out. The audit is free.