Plans & billing
Every organization is on a plan. The Plan & billing page in the dashboard shows the plan you're on, what it includes, how much of each metered dimension you've used, and — for admins — a one-click way to upgrade or manage payment. Find it in the org sidebar under plan & billing.
Your current plan
The top card shows your plan's name and status, and when it renews (or, if you've cancelled, when access ends). Below it, what's included breaks down your plan into:
- Features — capabilities that are on or off (managed keys, temporary access, audit export, and so on).
- Limits — hard caps like applications, environments per app, or service tokens.
unlimitedmeans there's no cap.
Plans aren't enforced yet — every organization currently has full access regardless of its plan. The page shows what your plan will include once enforcement is turned on, so you can see where you stand ahead of time. Nothing you do today is blocked by a limit.
Usage — the metered numbers
The Usage section shows each metered dimension as used / included, with a bar that turns amber as you approach the included amount and red if you go over. Metered dimensions bill any usage beyond what your plan includes as overage.
| Dimension | What the number counts |
|---|---|
| Members | Everyone in the organization right now. |
| Monthly resolves | Successful secret resolutions (GET /v1/resolve) so far this calendar month. This is the request every seekrit run, service token, proxy, and CI job makes to fetch its secrets — so it grows with how often your workloads start up, not how many secrets you store. |
included shows as unlimited when your plan sets no included cap on that dimension (you're
never billed overage for it). If a number reads not available here, that deployment doesn't have
usage metering wired up — treat it as unknown, not zero.
Monthly resolves are metered from sampled analytics, so the count is a close estimate under heavy traffic rather than an exact ledger — it's meant for understanding usage and billing, not reconciliation. Denied resolves and every mutating action are recorded exactly in the audit log.
Limits & usage on each page
You don't have to open this page to see where you stand. Each resource page shows its own usage against your plan's cap, right next to the title — the Applications page shows 3 / 3 when your plan includes three, Members shows seats used against what's included, and the same goes for groups, service tokens, KMS keys, and lease targets. The count turns amber as you approach the cap and red if you go over.
Once enforcement is on, plans also gate the dashboard directly:
- Features your plan doesn't include — managed keys, temporary access, or audit log export — show an upgrade prompt in place of the feature, with a link back to this page.
- Create actions disable at a cap — e.g. the new application button greys out once you've reached your plan's application limit, with a tooltip explaining why. Metered dimensions like members aren't blocked; usage beyond what's included simply bills as overage.
Changing plans
Admins and owners see the Change plan section with a card per plan. Your current plan is marked current and its button is disabled; every other plan shows Choose plan.
Upgrading to a paid plan:
- Click Choose plan on the plan you want. You're taken to a secure Stripe checkout page.
- Enter payment details and confirm. Payment is handled entirely by Stripe — seekrit never sees your card.
- You're returned to the dashboard; your plan updates within a few moments.
Switching to the Free plan (downgrading):
Click Choose plan on Free. Because a downgrade can leave you over the new plan's limits, we confirm first:
- If your current usage fits the plan, confirm and you're moved to Free right away — any paid subscription is cancelled.
- If you're over the Free plan's limits on something (for example, more members than Free includes), the dialog lists what's over and by how much before you confirm. Once plan limits are enforced, usage above the new plan's limits has to be brought back within them to fit.
Once you have a paid subscription, Manage billing (top-right of the current-plan card) opens the Stripe billing portal, where you can update your card or download invoices.
Only organization admins and owners can change the plan or manage billing. Members see the plan and usage but not the controls. If a paid plan's Choose plan button is disabled, that plan isn't wired up for self-serve checkout on this deployment — reach out and we'll set it up.
Promo codes
If you've been given a promo code, redeem it in the Promo code section at the bottom of the billing page. A code moves your organization onto the plan it grants — Team or Enterprise — with no card and no checkout.
- Type the code and click Redeem. Casing, spaces, and dashes don't matter:
launch-2026andLAUNCH2026are the same code. - Your plan updates immediately. The current-plan card then shows which code granted it, and the date it runs until.
Most codes run for a set period. When that period ends your organization returns to the Free plan automatically — nothing is charged, and you're not moved onto a paid plan without asking. Any secrets, apps, or members over the Free plan's limits stay exactly where they are; once plan limits are enforced you'd need to bring usage back within Free's limits or pick a paid plan.
Only admins and owners can redeem a code. A code can be used once per organization, and can't be redeemed while you have an active paid subscription — cancel or manage that in the billing portal first. Every code that can't be redeemed reports the same message, so if you're sure the code is right, check with whoever gave it to you that it's still running.
Applying a discount to a paid plan works differently: enter that code in the promotion code box on the Stripe checkout page itself, not here.
From the CLI
The same view and the same actions, without opening the dashboard. Checkout and the billing portal are browser flows, so those commands print a URL to open rather than completing a payment in your terminal.
seekrit billing # plan, status, usage, and what this deployment supports
seekrit billing entitlements # every entitlement and where its value came from
seekrit billing checkout team # prints a Stripe checkout URL
seekrit billing portal # prints a billing-portal URL
seekrit billing cancel # back to Free; asks first
Redeeming a promo code is dashboard-only — there's no CLI command for it.
Grandfathering
When you subscribe, your plan is pinned to the exact version it was on. If seekrit later changes what a plan includes, existing subscriptions keep the terms they signed up with until you choose to move — so an upgrade never quietly changes the deal underneath you.