AgentShield
How it works
All use cases Snowflake Cortex security Gemini Enterprise security Bedrock AgentCore security Azure AI Foundry security OpenRouter security AI gateway LLM security RAG security MCP server security Coding agents Customer service agents AI agent governance AI compliance Government Financial services Enterprise agents AI firewall Agentic AI security AI agent monitoring AI-SPM Agent hardening Tools compared Agent access control Agent identity AI data leak prevention Human in the loop Agent sandboxing AI penetration testing AI agent guardrails Healthcare Legal Insurance Multi-agent security Zero trust for agents Threat modeling AI runtime security MCP gateway LangChain security Claude agent security OpenAI agent security OpenClaw security Hugging Face security Cursor AI security n8n security Copilot Studio security LiteLLM security Gemini CLI security GitHub Copilot security Microsoft 365 Copilot security Kiro security Codex security Microsoft Agent 365 security OpenAI Agent Builder security Microsoft Agent Framework security Google ADK security Flowise security NeMo Agent Toolkit security Zendesk AI agents security ChatGPT workspace agents security Amazon Quick Suite security Oracle AI Agent Studio security Pydantic AI security Mastra AI security Dify AI security Notion Custom Agents security Zapier MCP security Gemini Enterprise Agent Platform security OpenAI Agents API security Claude Managed Agents security Copilot Cowork security ServiceNow AI agents security watsonx Orchestrate security Security
Pricing Blog FAQ Contact Sign in

watsonx Orchestrate Pricing and Cost with the Security Controls Each Plan Includes

AgentShield Security Team·Oct 13, 2026·7 min read

Try it live

Watch AgentShield block an attack in real time.

Pick a scenario and drive the inspection lane yourself. No signup needed.

Threat Console
Interactive demo · 0 blocked in this session

Run a request

Runs the live engine on your text. Nothing is stored, no account needed.

Inspection lane

INSPECTING
⌖ untrusted input

Policy trace

High-risk action held for approval

Audit trail

Security lead and engineer reviewing a vendor shortlist on a laptop in a conference room

watsonx Orchestrate pricing on IBM's US page starts at 530 USD per month for Essentials (4,000 monthly active users, up to 200,000 messages) and 6,360 USD per month for Standard (40,000 users, up to 2,000,000 messages). Premium, which adds data isolation, a dedicated data space and a HIPAA-ready option, is priced on request. Every published plan includes security and access control and the Agentic Control Plane. What no plan includes is watsonx.governance, which is a separate product, or a per-call approval gate on tools that write to outside systems.

Prices below were checked on IBM's US pricing page on October 13, 2026. IBM says they are indicative, vary by country and exclude taxes, so treat them as a starting point for a quote, not a contract.

watsonx Orchestrate plans compared

PlanStarting priceUsers and messagesWhat it adds
Trial30 days at no chargeNot statedAgent building, chat interface, tools catalog, control plane, evaluation and observability
Essentials530 USD per month4,000 MAU, up to 200,000 messages, 10 GB of agent knowledge documentsAgent building and orchestration, workflow and document processing, custom tools, core AI and LLMs, security and access control, control plane
Standard6,360 USD per month40,000 MAU, up to 2,000,000 messages, 10 GB of documentsEverything in Essentials with higher throughput, concurrency and capacity, plus ready-to-use domain agents
PremiumContact IBMCustomData isolation, dedicated data space, end-to-end protection, HIPAA-ready option, enterprise scale

Message usage is capped per user on both published plans, and channels include web chat, voice, Slack and Teams. Optional add-on agents from third parties are priced separately on custom terms. Older figures that still circulate on review sites, such as Essentials at 1,500 USD and Standard at 4,500 USD, came from a promotion that ended in September 2025.

How much does watsonx Orchestrate cost per user?

At list price and full use, Essentials works out to roughly 0.13 USD per monthly active user and Standard to roughly 0.16 USD. Those numbers are only useful for comparison, because few companies fill the user cap. A 300-person HR shared-services team on Essentials pays about 1.77 USD per active user per month, and the message cap per user matters more than the user cap once agents run multi-step tasks. Ask IBM how agent-to-agent calls and tool calls count against messages before you size the plan.

Which security controls sit on which plan

The good news for buyers is that IBM did not put the core governance features behind the top tier. The control plane, which IBM introduced in June 2026 with runtime policy management, credential health monitoring, an Agent Access overview and Content Guardrails, is listed on Essentials and Standard.

ControlEssentialsStandardPremium
Security and access control, role-based accessIncludedIncludedIncluded
Agentic Control Plane and Content GuardrailsIncludedIncludedIncluded
ADK pre-invoke and post-invoke plug-insAvailable through the ADKAvailable through the ADKAvailable through the ADK
Data isolation and dedicated data spaceNot listedNot listedIncluded
HIPAA-ready optionNot listedNot listedIncluded
Enforcement Tracking evidence in watsonx.governanceRequires watsonx.governance, a separate IBM product

For a US healthcare provider or a health plan, that table decides the plan before anything else does. If agents will touch protected health information, the HIPAA-ready option is on Premium, so the published prices are not your prices. Our page on healthcare AI agents covers the BAA questions to ask any agent platform.

The security costs that land next to the subscription

Three line items show up in most enterprise Orchestrate rollouts that go past chat and into actions. None of them is hidden; they are simply not part of the Orchestrate SKU.

  • watsonx.governance. If audit or model risk wants threshold evidence on agent quality, Enforcement Tracking sends evaluation metrics into watsonx.governance and records pass and breach results. IBM's announcement does not list a price for that pairing, so get it quoted with the Orchestrate deal.
  • Premium for regulated data. Data isolation and the HIPAA-ready option sit on Premium. Budget for a quote, not for 6,360 USD.
  • A gate on outbound write calls. Orchestrate's plug-ins act on messages and answers, and its human-in-the-loop steps act where a builder placed them in a workflow. Agents that call remote MCP tools to pay a supplier, change a vendor's bank account or grant a role need a per-call rule and a second approver if your auditors ask who approved each one.

That third item is what we sell. AgentShield is published at 49, 199, 749 and 1,498 USD per month on its four plans, half that when billed yearly, and every plan is bought by card. You point the Orchestrate remote MCP toolkit URL at a gateway endpoint, and each call is checked against per-tool and per-argument policy, with risky calls held for a named approver. The full prices are on our AI security pricing page.

When the extra security spend is not worth it

Plenty of Orchestrate deployments do not need anything beyond the plan. Be honest about which one you have.

DeploymentExtra security spendWhy
HR and IT help agents that answer from policy documentsNoneNo write action to gate; Content Guardrails and plug-ins cover answers
Onboarding or procurement flows with fixed sign-off stepsNoneHuman-in-the-loop workflow steps cover a known approval point
Agents on protected health informationPremium tierData isolation and the HIPAA-ready option are listed there
Model risk needs threshold evidencewatsonx.governanceEnforcement Tracking writes the evidence
Agents with MCP tools that pay, change vendors or grant accessA per-call gatewayAn argument rule and a second approver on every risky call

Two of five rows cost nothing extra. If you are building next year's software plan, it helps to put the Orchestrate subscription, the governance add-on and any gateway in one place in your business budgeting software, so the per-user cost is visible next to the headcount it replaces.

Questions buyers ask before signing

Is there a free version of watsonx Orchestrate?

No permanent free plan is listed. IBM offers a 30-day trial that includes agent building, the chat interface, the tools catalog, the control plane and evaluation and observability. After the trial, the lowest published plan is Essentials at 530 USD per month.

Is watsonx Orchestrate priced per user or per agent?

IBM prices by plan, and each plan sets a cap on monthly active users and messages per month, with message usage capped per user. It is not priced per agent. Essentials allows 4,000 monthly active users and Standard 40,000, and Premium limits are custom.

Does watsonx Orchestrate include security features on every plan?

Yes. Security and access control and the control plane are listed on Essentials and Standard, and Premium includes everything in Standard. Data isolation, a dedicated data space and the HIPAA-ready option are listed only on Premium.

Is watsonx.governance included with watsonx Orchestrate?

No. watsonx.governance is a separate IBM product. Enforcement Tracking connects the two by sending Orchestrate agent evaluation metrics into watsonx.governance, where they are checked against thresholds set by the business and stored as evidence.

Next step

Before you size the plan, list which agents will call tools that write, and on which systems. That list decides whether the published price is your price. Our watsonx Orchestrate security page walks through toolkit scoping, credentials and approval for each of those calls, and the MCP gateway page shows how a gate sits in front of a server. When you are ready, get started on the plan that fits your agent count.

See the firewall block an attack live.

Drive the Threat Console and watch a real prompt injection get stopped, then put AgentShield in front of your own agents.

Open the console