AgentShield
How it works
All use cases Snowflake Cortex security Gemini Enterprise security Bedrock AgentCore security Azure AI Foundry security OpenRouter security AI gateway LLM security RAG security MCP server security Coding agents Customer service agents AI agent governance AI compliance Government Financial services Enterprise agents AI firewall Agentic AI security AI agent monitoring AI-SPM Agent hardening Tools compared Agent access control Agent identity AI data leak prevention Human in the loop Agent sandboxing AI penetration testing AI agent guardrails Healthcare Legal Insurance Multi-agent security Zero trust for agents Threat modeling AI runtime security MCP gateway LangChain security Claude agent security OpenAI agent security OpenClaw security Hugging Face security Cursor AI security n8n security Copilot Studio security LiteLLM security Gemini CLI security GitHub Copilot security Microsoft 365 Copilot security Kiro security Codex security Microsoft Agent 365 security OpenAI Agent Builder security Microsoft Agent Framework security Google ADK security Flowise security NeMo Agent Toolkit security Zendesk AI agents security ChatGPT workspace agents security Amazon Quick Suite security Oracle AI Agent Studio security Pydantic AI security Mastra AI security Dify AI security Notion Custom Agents security Zapier MCP security Gemini Enterprise Agent Platform security OpenAI Agents API security Claude Managed Agents security Copilot Cowork security ServiceNow AI agents security watsonx Orchestrate security SAP Joule security UiPath agent guardrails Workday agent security GitLab Duo agent security Intercom Fin agent security Atlassian Rovo security Claude Code enterprise security Windsurf security Devin security Replit enterprise security Gemini Code Assist enterprise security Augment Code enterprise security Amazon Q Developer enterprise security Cline enterprise security Security
Pricing Blog FAQ Contact Sign in

Cline Enterprise Pricing and the Security Controls to Budget Beside It

AgentShield Security Team·Nov 6, 2026·6 min read

Try it live

Watch AgentShield block an attack in real time.

Pick a scenario and drive the inspection lane yourself. No signup needed.

Threat Console
Interactive demo · 0 blocked in this session

Run a request

Runs the live engine on your text. Nothing is stored, no account needed.

Inspection lane

INSPECTING
⌖ untrusted input

Policy trace

High-risk action held for approval

Audit trail

Cline's client costs nothing and its Enterprise plan has no public price, so the number that matters for a budget is inference usage plus the work of making an autonomous coding agent safe. On the vendor pricing page, read on November 6, 2026, there are two plans: Open Source, listed as free, and Enterprise, listed as custom. Rates change, so confirm them with the vendor before you sign.

What each Cline plan includes

PlanListed priceWhat the page says it includes
Open SourceFree client, pay for inferenceVS Code extension, CLI, client-side architecture, inference at cost or with your own key, MCP Marketplace, multi-root workspaces, community support
EnterpriseCustom, contact salesEverything above plus JetBrains extension, SSO, SLA, dedicated support, centralized billing, role based access control, a limit on inference providers, team dashboard, authentication logs

The page lists advanced configuration management and fine grained permissioning as coming soon, and its FAQ mentions OIDC, SCIM, audit logs, VPC deployment and OpenTelemetry for Enterprise without saying which plan card they belong to. The page states no per-seat price, no inference rate and no markup, so a quote is the only way to get those numbers.

How Cline usage is paid

With the open source plan you pay the model provider only, either at cost through Cline or with your own key. That means the bill follows how much work you hand to the agent, not how many engineers you have. A looping task or a large repository read many times can cost more than a month of casual use, so size it from a pilot rather than a demo.

A practical way to size it is to run two or three weeks with a small group on real tickets, record the tokens each task used, and multiply by the work you expect agents to take on. Teams that want that figure tracked against other spend can look at expense tracking built for small teams.

The security costs that sit outside the plan price

A free client or an Enterprise contract buys the product. It does not buy the work of making an autonomous agent safe to hand credentials. Budget these lines separately.

Cost lineWho pays itTypical shape
Vendor and provider reviewSecurity and procurementTraining, retention and data processing terms for Cline and for every model provider you allow. Hours, not dollars
Scoped service accounts for MCP serversPlatform teamOne account per integration, narrow scopes, no personal tokens
Branch protection and review rulesEngineeringRequired reviews on every repository the agent can push to
Logging and attributionPlatform teamAuthentication logs are listed. Confirm whether tool calls are recorded as well
Control on high-impact actionsSecurityRules and approval for deploys, payments, access grants and bulk changes

The first four are mostly staff time and are worth doing whatever you buy. The last is a purchase decision, and it depends on what the agent can reach. The full review of what Cline publishes, and where each control stops, is on Cline enterprise security.

A budgeting checklist before you sign

  1. Get a written Enterprise quote with the SSO protocol, SCIM, log contents and support terms listed.
  2. Run a pilot and record inference spend per task.
  3. Set a spend limit slightly above the pilot figure and review it monthly.
  4. Limit providers to ones your data agreements cover.
  5. Decide whether auto-approve is allowed, and for which actions.
  6. List the production actions an agent may take. If the list is not empty, price a per call control for those paths, as covered on tool permissions.

How much does Cline cost for a team?

The Cline client is free. A team pays for model inference, either at cost through Cline or directly to a provider with its own key. Enterprise is priced by quote, and the pricing page lists no seat price. Plan for usage that scales with how many tasks agents take on.

Is Cline really free?

The open source client has no subscription or seat fee on the pricing page, but inference is a real cost. A company handling private code should also budget administration time, and Enterprise for single sign-on, provider limits and a team dashboard.

Does Cline Enterprise include security features?

The pricing page lists SSO, role based access control, a limit on inference providers, a team dashboard and authentication logs. It does not list SOC 2 or per call approval for tools. Those are the items to ask for in writing, or to cover with a gateway in front of the tools Cline calls.

See the firewall block an attack live.

Drive the Threat Console and watch a real prompt injection get stopped, then put AgentShield in front of your own agents.

Open the console