AgentShield
How it works
All use cases Snowflake Cortex security Gemini Enterprise security Bedrock AgentCore security Azure AI Foundry security OpenRouter security AI gateway LLM security RAG security MCP server security Coding agents Customer service agents AI agent governance AI compliance Government Financial services Enterprise agents AI firewall Agentic AI security AI agent monitoring AI-SPM Agent hardening Tools compared Agent access control Agent identity AI data leak prevention Human in the loop Agent sandboxing AI penetration testing AI agent guardrails Healthcare Legal Insurance Multi-agent security Zero trust for agents Threat modeling AI runtime security MCP gateway LangChain security Claude agent security OpenAI agent security OpenClaw security Hugging Face security Cursor AI security n8n security Copilot Studio security LiteLLM security Gemini CLI security GitHub Copilot security Microsoft 365 Copilot security Kiro security Codex security Microsoft Agent 365 security OpenAI Agent Builder security Microsoft Agent Framework security Google ADK security Flowise security NeMo Agent Toolkit security Zendesk AI agents security ChatGPT workspace agents security Amazon Quick Suite security Oracle AI Agent Studio security Pydantic AI security Mastra AI security Dify AI security Notion Custom Agents security Zapier MCP security Gemini Enterprise Agent Platform security OpenAI Agents API security Claude Managed Agents security Copilot Cowork security ServiceNow AI agents security watsonx Orchestrate security SAP Joule security Security
Pricing Blog FAQ Contact Sign in

SAP Joule Pricing and SAP Joule Cost in AI Units with the Security Controls to Budget

AgentShield Security Team·Oct 14, 2026·7 min read

Try it live

Watch AgentShield block an attack in real time.

Pick a scenario and drive the inspection lane yourself. No signup needed.

Threat Console
Interactive demo · 0 blocked in this session

Run a request

Runs the live engine on your text. Nothing is stored, no account needed.

Inspection lane

INSPECTING
⌖ untrusted input

Policy trace

High-risk action held for approval

Audit trail

Two IT procurement leads reviewing a printed software renewal quote with a calculator in a meeting room

SAP Joule pricing has two layers. Base AI is included in every SAP cloud subscription at no extra cost and needs no AI Units. Joule agents are priced in AI Units per action, and every SAP-delivered agent in 2026 costs 0.02 AI Units per agent action. AI Units are bought once a year and expire after 12 months. SAP does not publish a dollar price per AI Unit.

Everything below was read on SAP's AI pricing page and the Joule documentation on October 14, 2026. SAP changed the model during 2026, so many advisory pages still quote per-user Joule Premium packages that SAP is retiring. If a number in a proposal does not match the table below, ask which model it was built on.

SAP Joule pricing model at a glance

What you useHow SAP chargesWhat to watch
Base AI and Joule AssistantsIncluded in SAP cloud subscriptions, no AI Units, no separate charge for Joule AssistantsIncluded does not mean unlimited agent actions
SAP-delivered Joule agentsAI Units per action, 0.02 AI Units per agent action in 2026Volume. An agent that runs thousands of actions a day adds up
AI UnitsBought annually under one SKU, expire after 12 months, overage billed on pay-per-use termsUnused units are lost at expiry, overage is billed on excess-use terms
Joule for Consultants35 AI Units per user per month with a pooled request allowance, overage at 2 AI Units per 1,000 requestsOnly relevant if your SI or internal SAP team uses it
Custom agents in Joule Studio runtimeFree in production through the end of 2026, then consumption billing through the BTP Enterprise AgreementYour 2027 budget needs a line for compute, storage, transactions and tokens

The per-user packages, Joule Premium for Finance, HCM, Supply Chain, Spend Management and Customer Experience, are being retired as their features move into Base AI. That is good news for most buyers, because features you were quoted separately for may now be in your subscription.

How much does SAP Joule cost in dollars?

SAP does not publish a price per AI Unit in USD, so there is no honest single dollar figure. What you can compute is consumption. At 0.02 AI Units per action, 100,000 SAP-delivered agent actions a month use 2,000 AI Units a month, or 24,000 a year. Multiply that by the per-unit price on your order form and you have the agent line. Ask your SAP account executive for the unit price in writing, and for the discount tiers if you commit to more units up front.

Two habits keep this predictable. Count actions per agent during a pilot, not per user, because a single agent can run far more actions than a person would. And track the 12-month expiry date and renewal terms in your contract management software, so unused units are not a surprise at renewal.

The security costs that sit next to the Joule order form

SAP's identity model is strong. Joule agents run within the requesting user's identity and the agent's permitted scope, backend authorizations still apply, and SAP keeps customer data out of foundation model training. Most of the security budget around Joule is therefore not about SAP's own agents. It is about what your teams build next to them.

  • Role cleanup before agents scale. An agent inherits the user's authority. If AP clerks hold broad roles, their agents do too. This is internal or SI time, and it is the cheapest control you will buy.
  • Filtering and masking on custom agents. Generative AI Hub orchestration offers content filtering with Azure Content Safety or Llama Guard and data masking through SAP Data Privacy Integration. These run inside your BTP consumption, so they show up as usage, not as a separate SKU.
  • Runtime for custom agents from 2027. Custom Joule Studio agents are free to run in production through the end of 2026. Budget for consumption billing after that.
  • A gate on outbound write calls. Custom agents that call MCP tools or APIs outside SAP to pay a supplier, change vendor bank details or grant access need a rule on the arguments and a second approver if your auditors ask who approved each one. Identity checks alone pass these calls whenever the user could have made them.

That last item is what we sell. AgentShield is published at 49, 199, 749 and 1,498 USD per month on its four plans, half that when billed yearly, and every plan is bought by card. Custom Joule Studio agents call an AgentShield gateway endpoint instead of the tool, the gateway holds the real credential, and each call is checked against rules on the tool and its values, with risky calls held for a named approver. The full prices are on our pricing page.

When the extra security spend is not worth it

DeploymentExtra security spendWhy
Joule for answers, search and drafting onlyNoneNo write action to gate, and Base AI is included
SAP-delivered agents inside SAP applicationsRole review onlyActions stay inside SAP authorizations and SAP workflow approvals
Custom agents that only read SAP dataFiltering and masking in Generative AI HubThe risk is data exposure, not a harmful action
Custom agents with MCP tools that pay, change vendors or grant accessA per-call gatewayAn argument rule and a second approver on every risky call

Three of four rows need nothing from us. If you are in the fourth row, our SAP Joule security page walks through where the gate sits for Joule Studio agents, MCP servers and agents connected over A2A.

Questions buyers ask before signing

Is SAP Joule included in my SAP subscription?

Base AI is included in every SAP cloud subscription at no extra cost and needs no AI Units, and SAP says there is no separate charge for Joule Assistants. Joule agents are different: they consume AI Units per action, which you buy annually. Check which agents you plan to switch on before assuming the subscription covers them.

What are SAP AI Units?

AI Units are SAP's consumption currency for AI features beyond Base AI. You buy them annually under a single SKU, they expire after 12 months, and overage is billed under pay-per-use terms. SAP-delivered Joule agents use 0.02 AI Units per action in 2026, and Joule for Consultants uses 35 AI Units per user per month.

Is Joule Premium still sold?

SAP says the per-user-per-month Joule Premium packages for Finance, HCM, Supply Chain, Spend Management and Customer Experience are being retired as their features move into Base AI. If a renewal quote still lists them, ask your account team whether the same features are now included.

How much does Joule Studio cost?

Running custom-built agents in a productive Joule Studio runtime is free through the end of 2026, and design-time access has a fair-use allowance through the same date. From 2027, production use is billed on compute, storage, transactions and AI tokens through the BTP Enterprise Agreement. SAP has not published those rates as a single list price.

Next step

Before you size AI Units, list which agents will act and which will only answer, and for the ones that act, which systems they write to. That list sets both the AI Unit forecast and the security budget. If your agents share MCP servers with other platforms, our MCP gateway page shows how one policy point covers them all, and the human approval for AI agents page shows how to pick the few actions that need a person.

See the firewall block an attack live.

Drive the Threat Console and watch a real prompt injection get stopped, then put AgentShield in front of your own agents.

Open the console