Summary for security, legal, and procurement reviewers evaluating Blekline.
Product summary
Blekline provides Non-Human Identity & Runtime Enforcement at the agent boundary — mask, enforce, and audit prompts and tool calls before they reach LLMs and downstream systems.
- Cloud: app.blekline.com
- Open source: github.com/Blekline/blekline-oss
- Interactive demo: Runtime Simulator
Workspace routes (post-signup)
After account creation, workspaces land on the path chooser at /auth/choose-plan?gate=signup:
| Route | Audience | Billing | Outcome |
|---|---|---|---|
| Platform eval | K8s/Docker pilots, security architecture | No Stripe during eval (SOW for production) | nhim-audit upload → deployment checklist → compliance export |
| Self-serve MCP | Cursor / Claude Code integrators | Card-free tryout (50 masks) or Stripe subscription | API key + MCP wiring → MCP hub |
| Enterprise | Procurement, fleet rollout, regulated buyers | Custom SOW | Trust Vault, Lineage Firewall, private VNet, dedicated SLA |
Platform eval does not substitute for a production contract — eval workspaces are fixed-scope pilots with relaxed billing gates for posture and deploy tooling only.
OSS vs enterprise boundary
| Capability | OSS | Cloud SaaS | Enterprise program |
|---|---|---|---|
| MCP server, proxy, SDK | Yes | Yes | Yes |
| Ingress sidecar (contracts) | Yes | Yes | Yes |
| Cloud mask API + MCP ingress | — | Privacy+ | Yes |
| Fleet MCP + tool-call governance | — | Compliance+ | Yes |
| SIEM export + advanced governance | — | Governance+ | Yes |
| Enterprise vault controls | — | Governance+ | Yes |
| Trust Vault (sidecar tokenization) | — | — | Yes |
| Lineage Firewall (destructive block) | — | — | Yes |
| Azure authoritative PII | — | Yes | Yes |
| Private VNet / dedicated SLA | — | — | Yes |
Self-serve tiers (reference)
Public self-serve plans on Stripe: Privacy (basic), Compliance (builder), Governance (pro). Enterprise is custom SOW only. See in-app billing matrix for seat caps and feature dots.
Legal & privacy
- Terms
- Privacy
- Subprocessors
- DPA outline — contact support@blekline.com for executed DPA
Security artifacts
- Threat model
- Trust boundaries
- MCP identity pinning
- [Eval journey](/docs/get-started/eval-journey) — Track 01–03 golden path
Pilot engagement
Design partner and pilot programs available — GitHub design partner issue, enterprise@blekline.com, or the enterprise lead form on the path chooser.