Start free. Decide later.
Every account gets fourteen days of the whole thing — no card, no trimmed feature list, nothing that quietly starts charging on day fifteen. It stops, and you decide whether it earned a plan.
What it costs
Pricing for the paid tiers is not finalised. Rather than invent a number and change it on you, the figures below are marked as provisional — the trial is live today and is not.
The complete agent, for two weeks, from the moment you register.
- Every capability, no throttle
- Windows and Linux builds
- Automatic updates
- No card, no auto-renewal
- Offensive mode on request
For continued individual use once the trial ends. Price not yet set.
- Everything in the trial, ongoing
- Offensive mode, once approved
- Priority on bug reports
- Your own model keys — no markup
Several operators, one licence, permissions set centrally.
- Per-seat offensive-mode control
- Shared usage reporting
- Self-hosted licence server
- Named contact
Provisional means exactly that: no payment is taken anywhere on this site, there is no card form, and no plan renews itself. When pricing is settled it will appear here first, and existing trials will not be shortened to make a point.
Offensive mode is granted, not bought
Off on every account
REX's exploitation and post-exploitation tooling is disabled for every account, on every plan, until it is switched on for that specific person. Paying does not switch it on. An account nobody has looked at is an account nobody has approved.
The agent enforces this itself, in its main process, using a claim in the signed session token — not with a hidden button in the interface.
Ask, with context
Say who you are and what you are testing. Offensive tooling belongs on systems you own or have written permission to attack, and that is the only basis on which it is enabled.
Questions worth answering
What happens on day fifteen?
The agent stops running and tells you why. Nothing is deleted, no card is charged — there is no card. Sign in and the account is still there, waiting for a plan.
What does the server actually see?
Your email and display name, the id and avatar from GitHub or Google if you used them, and a running count of tokens the agent spends. Not your prompts, not your file names, not your code, not your targets.
Do I pay for model usage twice?
No. REX uses your own provider keys and talks to them directly from your machine. A plan pays for the agent, not for tokens — the token count here exists so usage is visible, not so it can be resold.
Does it need the internet to run?
Not continuously. It re-validates when it can and keeps working through a grace period when it cannot, so a flight or an air-gapped lab does not stop you mid-engagement.