Provisioning

Pricing that fits
what you need it for.

Four tiers. Two payment paths. The math doesn't change between them — the architecture is identical. Only the front door differs.

Pricing is not finalized

These are working bands, not published commitments. Final pricing will be validated through buyer conversations before any public announcement. Early access users will be first to know — and will receive founding-user rates. Join the waitlist.
Mission
$10–25/mo
Freelance journalists, activists, human rights defenders, dissidents in hostile environments.
  • Full deniable storage
  • Deadman release
  • Tor-routed access
  • Single Central
  • Capacity-gated by institutional revenue
Monero only
Get Started →
Crypto-Sovereign
$50–100/mo
Sovereignty-minded individuals. Self-custody ethos. No sales overhead required.
  • Full deniable storage
  • Deadman release
  • Tor-routed access
  • Optional multi-Central (Config B)
  • Self-serve provisioning
Monero only
Get Started →
Institutional
$2K–50K/mo
Newsrooms, law firms, NGOs, healthcare organizations, large operators.
  • Full deniable storage
  • Deadman release
  • Tor-routed access
  • Full redundancy (Config C)
  • Dedicated support + SLA
  • Receiving infrastructure add-on available
Stripe — institutional contract
Get Started →

The architecture is identical regardless of how you pay. The two paths serve different privacy requirements. Neither one changes what the server sees — nothing.

Anonymous funnel
Monero payment. No email. No phone. Signup via .onion. No sales conversation. The customer is invisible to the operator — not by policy, but because no identifying information ever passes through the system. Monero payments accepted globally, no OFAC filtering at the FGSP layer.
Institutional funnel
Stripe payment. Sales conversations. Contracts. SLAs. The customer organization is visible to the operator at the corporate level. Individual users within the organization are not — the architecture is the same. Stripe handles OFAC compliance. No special paperwork required for most jurisdictions.

The Mission tier is loss-led by design. It costs more to serve a Mission user than they pay. That's not an accident — it's the soul of the product. Every Institutional customer at the top tier can sponsor approximately 50–100 Mission users at break-even.

Mission-tier seat capacity is gated by Institutional revenue. We cannot accept unlimited Mission signups. We accept up to a multiple of current Institutional ARR. If you're a journalist, activist, or human rights defender who needs access and can't afford any tier, contact the partner organizations below — they hold grant allocations.

CPJ — Committee to Protect Journalists
Bulk seat allocation for verified journalists in hostile environments. CPJ verifies — FGSP never knows the individual user.
Front Line Defenders
Human rights defenders. Same model: partner org vouches, FGSP provides access, zero-knowledge architecture preserved end to end.

Partner program launches with the product. These relationships are being established now.


Available to Institutional customers. Turns your FGSP deployment into a source-intake system — a secure, deniable dropbox that sources can upload to anonymously. The existence of the dropbox is not provable. The source needs only a Navigator and access credentials to the receiving bulb.

Use case

A newsroom running a whistleblower program. A watchdog NGO accepting leaked documents. A law firm receiving sensitive materials from clients in hostile jurisdictions. The receiving infrastructure add-on is the difference between "we have secure storage" and "we have a secure intake pipeline."

Priced at $5K–25K/month as an add-on to the Institutional tier. Final pricing validated through buyer conversations.


Pricing isn't final yet. Be first in when it opens.

Join the Waitlist