Pricing

Query Subscriptions: The Foundation of ET Ducky

Every plan includes the full diagnostic engine: kernel-event capture on every endpoint, root cause analysis on every alert, behavioral detections, remote desktop, scripts, alerts, and fleet management. Plans differ only in how many AI diagnostic queries you run per month.

What Are Queries Used For?

Desktop Monitoring

Ask questions during local ETW monitoring sessions on your machine

Live Query Sessions

Interactive troubleshooting on single remote agents (1 query per session)

Multi-Agent Queries

Query multiple devices simultaneously (1 query per device)

Cross-Correlation

Analyze events across multiple agents with correlation (1 query per device)

Alert Analysis

Automated root cause analysis for triggered alerts (1 query per alert)

Free

$0 /month

Bring Your Own API Key

  • Full ETW monitoring capabilities
  • Local event correlation
  • Use your own API key (Anthropic, OpenAI, Copilot supported)
  • Desktop app and agent support
  • Unlimited live sessions
  • Organization support
  • No query limits with your own key

Business

$99 /month

5,000 Queries Per Month

  • Everything in Professional
  • 5x query capacity
  • Team collaboration tools
  • Advanced event correlation
  • Historical analytics
  • Automated alert analysis
  • Dedicated support channel
  • 20 free agents per subscribed member
  • Queries & agents pool across your org

Enterprise

$249 /month

50,000 Queries Per Month

  • Everything in Business
  • 50x query capacity
  • Enterprise-scale monitoring
  • Custom integrations
  • Advanced multi-agent correlation
  • SLA guarantee
  • White-glove support
  • 20 free agents per subscribed member
  • Queries & agents pool across your org
  • Organization-wide analytics

Organization Quota Pooling

When multiple users join an organization, their individual query quotas and free agent seats automatically combine into shared pools that any member can use across all use cases.

How It Works

  • Each subscribed member contributes their query quota and 20 free managed agent seats to the organization
  • Any member can use queries and agents from the shared pools
  • Queries work across Desktop app, agents, multi-agent sessions, and alerts
  • Example: 3 Professional users = 3,000 queries/month + 30 free managed agents for the entire organization
  • Real-time quota tracking shows organization-wide usage for both queries and agent seats

Query Usage Examples

Understanding how queries are consumed helps you choose the right subscription tier:

Use Case Query Cost Example
Desktop Monitoring 1 query per question "Why is this application crashing?" = 1 query
Single Agent Query 1 query per session Live troubleshooting on one server = 1 query
Multi-Agent Session 1 query per device Query 5 web servers simultaneously = 5 queries
Cross-Correlation 1 query per device Correlate events across 3 database servers = 3 queries
Alert Root Cause 1 query per alert Automated analysis of disk space alert = 1 query

Frequently Asked Questions

What counts as a query?

Each request to process correlated ETW events through the ET Ducky API server counts as one query. This includes diagnostic requests from the Desktop app, live session queries from agents, multi-agent queries (1 per device), cross-correlation analysis (1 per device), and automated alert analysis.

Can I use queries with both the Desktop app and agents?

Yes. Your query subscription provides a shared pool that works with the Desktop application, all deployed agents, multi-agent queries, cross-correlation sessions, and automated alert analysis. All queries count against the same monthly quota regardless of source.

What happens if I exceed my quota?

Once your monthly quota is reached, cloud-based processing will be paused until the next billing cycle. You can upgrade at any time, or switch to BYOK mode with the Free tier.

Do queries reset monthly?

Yes. Your query quota resets at the start of each billing cycle. Unused queries do not roll over.

What about data retention?

All plans include 14-day data retention at no cost. You can extend retention to 90 days, 1 year, or 2 years with the Data Retention add-on, billed per managed agent per month. See the Data Retention tab for pricing details.

How does organization quota pooling work?

When multiple users join an organization, their individual query quotas and free agent seats combine into shared pools. For example, if 3 users each have Professional plans (1,000 queries each), the organization gets a pool of 3,000 queries and 30 free managed agents that any member can use for desktop monitoring, agent queries, multi-agent sessions, cross-correlation, or alert analysis.

Ready to Get Started?

Choose your query subscription to deploy your first twenty agents for free!

Agent Pricing

Purchase agent seats (required for managed agents). Volume pricing is applied automatically.

ET Ducky uses a simple per-agent model for managed agents (Windows Service). Desktop agents (the Windows app) are free and unlimited.

Managed Agents (Service)

  • Shared / Entry: 20 agents free per subscribed user, then $5/agent/month
  • Dedicated Tier 1 (100–999): $4/agent/month
  • Dedicated Tier 2 (1,000–9,999): $3/agent/month
  • Dedicated Tier 3 (10,000+): $2/agent/month

Desktop Agents (App)

  • Price: Free (unlimited)
  • Use case: Deep-dive troubleshooting and interactive sessions when you need it
Annual billing: Save 15% on your agent and platform costs when billed annually.

What counts as a “Managed Agent”?

A managed agent is a Windows Service installed on servers or workstations that performs health monitoring, optional ETW collection, alert evaluation, and remote configuration.

Data retention add-on: Extend data retention beyond the default 14 days with per-agent pricing starting at $0.50/agent/month. See the Data Retention tab for full pricing.

Tip: Use the Calculator tab to estimate your monthly or annual total (platform + agents + hosting + retention).

Cloud Hosted Deployment

Fully-managed infrastructure by ET Ducky. Deploy agents, we handle everything else. Requires a query subscription to power diagnostics and analysis.

  • Zero infrastructure management
  • Automatic updates and scaling
  • Built-in high availability
  • AI processing included in query subscription
  • Get started in under 1 hour

Note: Cloud hosted agents require both a query subscription (for diagnostics) and agent seats. Hosting infrastructure is included at no additional cost. Query subscriptions are covered in the Query Subscriptions tab.

Agent Seat Pricing

20 agents per subscribed user are FREE! Pay only for agents beyond your free allowance. Org members without their own subscription do not add free agents.

11-99 agents
$5/agent/mo
$4.25 annual
100-999
$4/agent/mo
$3.40 annual
1,000-9,999
$3/agent/mo
$2.55 annual
10,000+
$2/agent/mo
$1.70 annual

Save 15% with annual billing

Example Monthly Costs

Note: Add your query subscription cost separately

50 agents
40 billable × $5 = $200
$200/month
$170/mo with annual
+ query subscription
POPULAR
120 agents
110 billable × $4 = $440
$440/month
+ query subscription
5,000 agents
4,990 × $3 = $14,970
$14,970/month
+ query subscription
25,000 agents
24,990 × $2 = $49,980
$49,980/month
+ query subscription

Ready to Get Started?

Start with a query subscription, then deploy 20 free agents per subscribed user

Choose Query Subscription