watsonx Orchestrate Pricing and Cost with the Security Controls Each Plan Includes
Try it live
Watch AgentShield block an attack in real time.
Pick a scenario and drive the inspection lane yourself. No signup needed.
Run a request
Runs the live engine on your text. Nothing is stored, no account needed.
Inspection lane
INSPECTINGPolicy trace
High-risk action held for approval
Audit trail
- § · → → →
watsonx Orchestrate pricing on IBM's US page starts at 530 USD per month for Essentials (4,000 monthly active users, up to 200,000 messages) and 6,360 USD per month for Standard (40,000 users, up to 2,000,000 messages). Premium, which adds data isolation, a dedicated data space and a HIPAA-ready option, is priced on request. Every published plan includes security and access control and the Agentic Control Plane. What no plan includes is watsonx.governance, which is a separate product, or a per-call approval gate on tools that write to outside systems.
Prices below were checked on IBM's US pricing page on October 13, 2026. IBM says they are indicative, vary by country and exclude taxes, so treat them as a starting point for a quote, not a contract.
watsonx Orchestrate plans compared
| Plan | Starting price | Users and messages | What it adds |
|---|---|---|---|
| Trial | 30 days at no charge | Not stated | Agent building, chat interface, tools catalog, control plane, evaluation and observability |
| Essentials | 530 USD per month | 4,000 MAU, up to 200,000 messages, 10 GB of agent knowledge documents | Agent building and orchestration, workflow and document processing, custom tools, core AI and LLMs, security and access control, control plane |
| Standard | 6,360 USD per month | 40,000 MAU, up to 2,000,000 messages, 10 GB of documents | Everything in Essentials with higher throughput, concurrency and capacity, plus ready-to-use domain agents |
| Premium | Contact IBM | Custom | Data isolation, dedicated data space, end-to-end protection, HIPAA-ready option, enterprise scale |
Message usage is capped per user on both published plans, and channels include web chat, voice, Slack and Teams. Optional add-on agents from third parties are priced separately on custom terms. Older figures that still circulate on review sites, such as Essentials at 1,500 USD and Standard at 4,500 USD, came from a promotion that ended in September 2025.
How much does watsonx Orchestrate cost per user?
At list price and full use, Essentials works out to roughly 0.13 USD per monthly active user and Standard to roughly 0.16 USD. Those numbers are only useful for comparison, because few companies fill the user cap. A 300-person HR shared-services team on Essentials pays about 1.77 USD per active user per month, and the message cap per user matters more than the user cap once agents run multi-step tasks. Ask IBM how agent-to-agent calls and tool calls count against messages before you size the plan.
Which security controls sit on which plan
The good news for buyers is that IBM did not put the core governance features behind the top tier. The control plane, which IBM introduced in June 2026 with runtime policy management, credential health monitoring, an Agent Access overview and Content Guardrails, is listed on Essentials and Standard.
| Control | Essentials | Standard | Premium |
|---|---|---|---|
| Security and access control, role-based access | Included | Included | Included |
| Agentic Control Plane and Content Guardrails | Included | Included | Included |
| ADK pre-invoke and post-invoke plug-ins | Available through the ADK | Available through the ADK | Available through the ADK |
| Data isolation and dedicated data space | Not listed | Not listed | Included |
| HIPAA-ready option | Not listed | Not listed | Included |
| Enforcement Tracking evidence in watsonx.governance | Requires watsonx.governance, a separate IBM product | ||
For a US healthcare provider or a health plan, that table decides the plan before anything else does. If agents will touch protected health information, the HIPAA-ready option is on Premium, so the published prices are not your prices. Our page on healthcare AI agents covers the BAA questions to ask any agent platform.
The security costs that land next to the subscription
Three line items show up in most enterprise Orchestrate rollouts that go past chat and into actions. None of them is hidden; they are simply not part of the Orchestrate SKU.
- watsonx.governance. If audit or model risk wants threshold evidence on agent quality, Enforcement Tracking sends evaluation metrics into watsonx.governance and records pass and breach results. IBM's announcement does not list a price for that pairing, so get it quoted with the Orchestrate deal.
- Premium for regulated data. Data isolation and the HIPAA-ready option sit on Premium. Budget for a quote, not for 6,360 USD.
- A gate on outbound write calls. Orchestrate's plug-ins act on messages and answers, and its human-in-the-loop steps act where a builder placed them in a workflow. Agents that call remote MCP tools to pay a supplier, change a vendor's bank account or grant a role need a per-call rule and a second approver if your auditors ask who approved each one.
That third item is what we sell. AgentShield is published at 49, 199, 749 and 1,498 USD per month on its four plans, half that when billed yearly, and every plan is bought by card. You point the Orchestrate remote MCP toolkit URL at a gateway endpoint, and each call is checked against per-tool and per-argument policy, with risky calls held for a named approver. The full prices are on our AI security pricing page.
When the extra security spend is not worth it
Plenty of Orchestrate deployments do not need anything beyond the plan. Be honest about which one you have.
| Deployment | Extra security spend | Why |
|---|---|---|
| HR and IT help agents that answer from policy documents | None | No write action to gate; Content Guardrails and plug-ins cover answers |
| Onboarding or procurement flows with fixed sign-off steps | None | Human-in-the-loop workflow steps cover a known approval point |
| Agents on protected health information | Premium tier | Data isolation and the HIPAA-ready option are listed there |
| Model risk needs threshold evidence | watsonx.governance | Enforcement Tracking writes the evidence |
| Agents with MCP tools that pay, change vendors or grant access | A per-call gateway | An argument rule and a second approver on every risky call |
Two of five rows cost nothing extra. If you are building next year's software plan, it helps to put the Orchestrate subscription, the governance add-on and any gateway in one place in your business budgeting software, so the per-user cost is visible next to the headcount it replaces.
Questions buyers ask before signing
Is there a free version of watsonx Orchestrate?
No permanent free plan is listed. IBM offers a 30-day trial that includes agent building, the chat interface, the tools catalog, the control plane and evaluation and observability. After the trial, the lowest published plan is Essentials at 530 USD per month.
Is watsonx Orchestrate priced per user or per agent?
IBM prices by plan, and each plan sets a cap on monthly active users and messages per month, with message usage capped per user. It is not priced per agent. Essentials allows 4,000 monthly active users and Standard 40,000, and Premium limits are custom.
Does watsonx Orchestrate include security features on every plan?
Yes. Security and access control and the control plane are listed on Essentials and Standard, and Premium includes everything in Standard. Data isolation, a dedicated data space and the HIPAA-ready option are listed only on Premium.
Is watsonx.governance included with watsonx Orchestrate?
No. watsonx.governance is a separate IBM product. Enforcement Tracking connects the two by sending Orchestrate agent evaluation metrics into watsonx.governance, where they are checked against thresholds set by the business and stored as evidence.
Next step
Before you size the plan, list which agents will call tools that write, and on which systems. That list decides whether the published price is your price. Our watsonx Orchestrate security page walks through toolkit scoping, credentials and approval for each of those calls, and the MCP gateway page shows how a gate sits in front of a server. When you are ready, get started on the plan that fits your agent count.
See the firewall block an attack live.
Drive the Threat Console and watch a real prompt injection get stopped, then put AgentShield in front of your own agents.