Nightfall AI
Data loss prevention for SaaS, endpoints and AI agents, priced by quote
Overview
Nightfall AI is a San Francisco data loss prevention platform that uses trained detection models to find and block sensitive data in SaaS apps, on managed endpoints and in AI tools and agents. It sells two quote-priced packages per user per year and offers a free developer API tier of 3 GB scanned a month.
Pricing
Pricing shown for reference only. These figures reflect RECATOOLS research as of 14 Oct 2026 and may be out of date or incomplete. This is not financial or purchasing advice — always confirm the current price on the provider’s official website before making any decision.
- 3 GB of data scanned per month
- All Data Detection & Response and Data Exfiltration Prevention features
- 2 endpoint devices per user
- Dedicated customer success manager
- Priority support with 1-hour SLA
- All Foundation features
- Hooks for Cursor, Claude Code and VS Code
- Local and remote MCP discovery with shadow-MCP detection
- Claude Compliance API monitoring for Claude Enterprise
- Packs of 1, 3, 5 or 20 TB a year for data-at-rest scanning
What you can produce with Nightfall AI
- Sensitive data found and remediated at rest in about a dozen API-connected SaaS apps
- Exfiltration blocked on managed endpoints across browsers, desktop apps, USB, git and shell commands
- Paste and upload blocking for unsanctioned AI tools such as ChatGPT and Gemini
- Prompt, MCP tool call and shell command inspection in Cursor, Claude Code and VS Code (Premier)
- MCP server discovery and shadow-MCP risk scoring (Premier)
- Claude Enterprise monitoring through the Claude Compliance API (Premier)
- A detection API with a free 3 GB monthly scanning allowance
Nightfall is a credible modern DLP option for companies whose sensitive data moves through SaaS apps, laptops and, increasingly, AI coding agents. Its 2026 additions, controls over Claude Code, Cursor and VS Code, MCP server discovery and Claude Enterprise monitoring, cover ground most legacy DLP suites do not.
The catch is opacity: no published prices and no self-serve trial, only a short proof of value. Its precision figures are its own. Developers can test the detection engine free through the API before anyone talks to sales.
What we found
Nightfall AI is a data loss prevention platform from San Francisco, run by Shoreline Labs, Inc. It came out of stealth in November 2019 with $20.3 million in funding co-led by Bain Capital Ventures and Venrock, having started life as Watchtower AI, and raised a $40 million Series B in 2022. Its co-founders are chief executive Rohan Sathe, previously an Uber Eats engineer, and Isaac Madan, a former Venrock investor.
The product scans data in two ways. API connections to about a dozen SaaS apps, including Google Drive, Slack, GitHub, Jira, Confluence, Salesforce, Microsoft 365, Notion and ChatGPT Enterprise, find and remediate sensitive data at rest. An endpoint agent watches what leaves a managed laptop through any browser, desktop app, AI tool, USB drive, git push or shell command. Detection runs on trained models rather than regular expressions, and Nightfall claims 95% precision and 130 detectors across 30 countries; both are vendor figures.
Through 2026 the emphasis moved to AI agents. A June launch added controls for Cursor, Claude Code and VS Code, inspecting prompts, MCP tool calls and shell commands, and a Claude Compliance API integration for Claude Enterprise. September brought an MCP gateway and hooks that block data before Claude reads it. Nightfall's own October release reported its best month for recurring revenue and its largest deal so far, without figures.
Pricing is per user per year in two packages, Foundation Edition for DLP across SaaS, email, AI apps and endpoints and Premier Edition with the AI agent controls, but no prices are shown. There is no self-serve trial; buyers get a free proof of value of about seven days. Developers have a separate route: the Nightfall Developer Platform has a free plan that scans 3 GB a month through the API.
Map your SaaS estate against the integration list first, and for ASEAN data-residency rules ask where scanning happens before signing.
Compiled by RECATOOLS from public sources: vendor documentation and pricing, code repositories and published reporting.
About this listing
This entry was compiled from publicly available data including Nightfall AI's official website, press releases, documentation, and reputable third-party publications. RECATOOLS is not affiliated with Nightfall AI unless explicitly stated.
Third-party AI tools update their pricing, features, availability, and policies frequently. Information here may be outdated by the time you read this — we make reasonable efforts to keep listings current, but cannot guarantee absolute accuracy.
For the latest details, please refer to Nightfall AI directly →
Spotted something out of date? Suggest an update →
Related reading
Alternatives to Nightfall AI
More in Security & Safety
