Self-hosted SpiceDB, with the enterprise pieces.

A commercially licensed build of SpiceDB carrying the functionality AuthZed runs in its own managed services: scoped API access, audit logging, rate limiting, and embargoed security fixes. You operate it in your own infrastructure.

Schedule a call

Delivery: Self-hosted, in your infrastructure
Licensing: Annual subscription, any region
Releases: Enterprise builds of SpiceDB
Security: Embargoed fixes before disclosure

The license

What the enterprise build adds

Open source SpiceDB is the same engine. The enterprise build carries the operational and compliance surface that regulated deployments end up needing.

Each capability below links to the doc that defines it.

Docs →

Restricted API access

Fine-grained access management scopes which calls each service account is allowed to make.

Docs →

Audit logging

Full request and response detail for every API operation, published to a log sink.

Docs →

Rate limiting

Distributed limits by endpoint, service account, header, or CEL expression. Currently in tech preview.

Docs →

Security embargo

Private notice, fixes, and remediation time before a vulnerability is publicly disclosed.

Alongside

What people run with it

Pairs with · ServicesAuthZed SupportSchema design, architecture review, and response-time SLAs from the engineers who build SpiceDB.

Explore Support →

Pairs with · Open sourceSpiceDB OperatorThe official Kubernetes operator for creating, migrating, and updating SpiceDB clusters.

Explore the Operator →

Talk about a license

Tell us where SpiceDB runs today and which of these you need, and we will size a license around it.

Self-hosted products are licensed annually and available in any region.