Pricing
Who Sees What pricing and plans
Who Sees What is a Salesforce access and permission auditor, and the foundation of the Digadop security family. It shows exactly who can reach a record or field, and the precise grant that lets them.
Every plan starts with a free trial you start yourself, in the app, with no sales call and no waiting list.
Introductory pricing: 17% off a 1-year contract, 25% off a 2-year contract, and 33% off a 3-year contract.
Sandboxes attach to a licensed production org. On Enterprise, the sandbox of your primary subscribed org is free and a sandbox of any other org is 50% off. On Professional, any sandbox is 50% off. A sandbox that is not free is billed at 50% of the org rate.
Who Sees What Professional
See who can see what, whenever you ask.
or $414.17/mo on a 1-year, $374.25/mo on a 2-year, and $334.33/mo on a 3-year contract
- Connect one production org
- 10 of the 17 ready-made audit templates, including the flagship "Who can see this record"
- Audit explorer: People, Profiles, Fields, Objects, and sharing paths
- Who can export: the bulk-egress report on every user who can get data out
- Connected app and OAuth authorization inventory, with dormant-app flags
- Sensitivity-ranked field exposure, and over-permissioned and dormant-access findings
- On-demand, point-in-time scans
- Export to CSV, multi-sheet Excel (XLSX), and print-ready PDF
- Risks tab: full risk-finding detail, every severity, traced to the Apex, Flow, Visualforce, or formula behind it
Who Sees What Enterprise
The edit, inactive-user, and external-detail upgrade.
or $1,078.17/mo on a 1-year, $974.25/mo on a 2-year, and $870.33/mo on a 3-year contract
Everything in Who Sees What Professional, plus
- All 17 ready-made audit templates, including the 7 Enterprise templates
- Who-can-edit audits for records, objects, and fields
- Load inactive (deactivated) users on demand, beyond the active-user audit
- Itemized external, Experience Cloud, community, and guest-user detail
- Permission-change simulation: what access would change if you changed a role, group, or sharing rule
- Access-change tracking over time and org-wide access drift
- Scheduled report exports with email and signed-webhook delivery
- API report export (CSV, XLSX, PDF, JSON) via REST and MCP
- Extended audit history and retentionComing soon
- Priority support, onboarding, and an SLAComing soon
Coming soon
Lynceon
The direct upgrade from Who Sees What, in the same Digadop security family.
planned pricing: discounted rates on a committed term
Everything in Enterprise, plus (on the roadmap)
- Remediation guidance and code recommendations for each finding
- Continuous monitoring and scheduled scans
- Code-security scanning across Apex and dependencies
- Security posture score and trend over time
- Risk prioritization by severity, exposure, and blast radius
- Compliance mapping for your access posture
- Threat and anomaly detection for unusual access patterns
A separate Digadop product, on the roadmap and not yet available for purchase. The price shown is planned.
The org is the licensed unit: whoever pays holds the license, and access is decoupled from who pays, so you can grant a consultant access to your org. Questions about pricing or volume? Get in touch.
Pricing questions
How much does Who Sees What cost?
Who Sees What starts with a free trial, so you can connect an org and see the full product before you pay. After the trial, pricing is per production org, billed monthly:
- Who Sees What Professional: $499 per org per month. Access visibility: the question library, the audit explorer, full risk-finding detail, exports, audit history, and on-demand scans.
- Who Sees What Enterprise: $1,299 per org per month. Everything above, plus who-can-edit audits, loading inactive users on demand, itemized external and Experience Cloud user detail, permission-change simulation, access-change tracking over time, org-wide access drift, scheduled report exports with email and signed-webhook delivery, and API report export (CSV, XLSX, PDF, JSON) via REST and MCP. Cross-org compare is coming soon to Enterprise and is not included yet. Extended audit history and retention, and priority support, onboarding, and an SLA, are coming soon to Enterprise too.
- Lynceon (coming soon): the next product in the Digadop security family. Where Who Sees What shows you the facts of access, Lynceon (coming soon) is designed to judge them and help you act, adding risk remediation, continuous monitoring, and code-security scanning. It is coming soon and not yet available for purchase; the planned price is $2,499 per org per month. Choose "Learn more" to follow it.
There is introductory pricing right now: 17% off with a one-year contract, 25% off with a two-year contract, and 33% off with a three-year contract, locked flat for the whole term and billed annually. For Who Sees What Professional that is $414.17 per month on a one-year term, $374.25 on a two-year term, and $334.33 on a three-year term; Who Sees What Enterprise is $1,078.17 on a one-year term, $974.25 on a two-year term, and $870.33 on a three-year term. See the pricing page for the current numbers and to start a free trial.
Choosing an edition
Start from the review you need to run, not from the feature list. Write down which production orgs and sandboxes are in scope, and the questions your reviewers will ask: who can see a record, who can edit it, and whether external, guest or inactive users have to be covered. Then check each question against the answer below.
If you are still working out what the review should cover, the FAQ explains how Salesforce decides who can see a record, and how to run an access review.
What is the difference between Who Sees What and Who Sees What Enterprise?
Who Sees What Professional answers "who can see what, when I ask." You use the audit explorer, the core question library, full risk-finding detail, exports, audit history, and on-demand scans.
Who Sees What Enterprise adds the parts that go beyond seeing access:
- who-can-edit audits for records, objects, and fields
- loading inactive (deactivated) users on demand, beyond the active-user audit
- itemized external, Experience Cloud, community, and guest-user detail
- permission-change simulation: what access would change if you changed a role, group, or sharing rule
- access-change tracking over time: what changed in a user's access to a record since a date
- org-wide access drift: what changed in your org's access model since a date, from snapshots a scheduled access change check takes; the check delivers its change report by email or to a signed webhook, by default only when access changed (a scheduled check, not continuous monitoring with alerting, which is Lynceon, coming soon)
- scheduled report exports: a question's report on the schedule you set, delivered by email or to a signed webhook
- API report export (CSV, XLSX, PDF, JSON) via REST and MCP, with API credentials you create and revoke in the app
Connecting more than one org is not the dividing line. The multi-org roster and one-click switching are available on every plan, including the free trial. Cross-org compare is coming soon to Enterprise and is not included yet. Extended audit history and retention, and priority support, onboarding, and an SLA, are coming soon to Enterprise too.
Before you start
Is there a free trial?
Yes. Who Sees What begins with a free trial, so you can connect your org with Salesforce OAuth and run real audits before you decide. You start the trial yourself from the app: no sales call and nobody to email first.
There are two ways to trial. Without a credit card you get about 3 days to explore, and export stays locked on that path. Add a card and the trial runs about 10 days with export unlocked (CSV, multi-sheet Excel, and print-ready PDF), and it converts to a paid plan automatically when the trial ends unless you cancel first. Either way it is one trial per org.
When you are ready to buy, checkout is self-serve as well. You pick the edition and term and complete the purchase in the app.
When the trial ends you choose a plan: plans are tiered (see Pricing), so some detail like the full risk findings and export moves to a paid tier, but your work carries over.
For questions about several orgs or a contract term, contact Digadop.
Compare editions
Every paid edition includes the full audit engine. Higher editions add scale, team reach, and (soon) the Lynceon security layer.
| Feature | Professional | Enterprise | Lynceon |
|---|---|---|---|
| Audit and analysis | |||
| Connect a Salesforce org (production or sandbox) | ✓ Included | ✓ Included | ✓ Included |
| Object, record, and field access audits | ✓ Included | ✓ Included | ✓ Included |
| Audit active users | ✓ Included | ✓ Included | ✓ Included |
| Load inactive (deactivated) users on demand | · Not included | ✓ Included | ✓ Included |
| Full sharing-model evaluation (profiles, permission sets, roles, sharing rules, FLS) | ✓ Included | ✓ Included | ✓ Included |
| Code and automation risk scan (Apex, Flows, Visualforce) | ✓ Included | ✓ Included | ✓ Included |
| People, Fields, and Risks views with per-record "why" | ✓ Included | ✓ Included | ✓ Included |
| Horton, the in-app assistant | ✓ Included | ✓ Included | ✓ Included |
| Exposure views others do not answer | |||
| Who can export: bulk data-egress capability report | ✓ Included | ✓ Included | ✓ Included |
| Connected app and OAuth authorization inventory, with dormant flags | ✓ Included | ✓ Included | ✓ Included |
| Sensitivity-ranked field exposure | ✓ Included | ✓ Included | ✓ Included |
| Over-permissioned and dormant-access findings | ✓ Included | ✓ Included | ✓ Included |
| Dependency map: what Apex, Flows, and formulas touch an object | ✓ Included | ✓ Included | ✓ Included |
| Cross-object formula exposure, reported as a confirmed leak | ✓ Included | ✓ Included | ✓ Included |
| Findings and evidence | |||
| Critical risk findings, full detail | ✓ Included | ✓ Included | ✓ Included |
| Medium and low risk findings, full detail | ✓ Included | ✓ Included | ✓ Included |
| Audit history: save and re-run snapshots | ✓ Included | ✓ Included | ✓ Included |
| Export to CSV, multi-sheet Excel (XLSX), and print-ready PDF | ✓ Included | ✓ Included | ✓ Included |
| Scale, team, and integration | |||
| Multiple connected orgs with one-click switching | ✓ Included | ✓ Included | ✓ Included |
| Itemized Experience Cloud, community, and guest-user detail | · Not included | ✓ Included | ✓ Included |
| Permission-change simulation | · Not included | ✓ Included | ✓ Included |
| REST API and MCP server | · Not included | ✓ Included | Soon |
| Access-change tracking over time | · Not included | ✓ Included | Soon |
| Scheduled report exports (email and signed webhook) | · Not included | ✓ Included | Soon |
| Integrations (SIEM, warehouse, ticketing) | · Not included | Soon | Soon |
| Security layer (Lynceon, in development) | |||
| Remediation guidance and code recommendations | · Not included | · Not included | Soon |
| Continuous monitoring and scheduled scans | · Not included | · Not included | Soon |
| Code-security scanning (Apex and dependencies) | · Not included | · Not included | Soon |
| Compliance mapping for your access posture | · Not included | · Not included | Soon |
| Threat and anomaly detection | · Not included | · Not included | Soon |
Every edition audits your active users by default. Loading inactive (deactivated) users is an on-demand, second step available on Enterprise and Lynceon; Professional audits active users only. Lynceon is on the roadmap and not yet available for purchase. "Soon" marks planned Lynceon capabilities.