CIFP swaps real credentials into requests at the network boundary. Your agents use the APIs they need without ever holding the secrets that unlock them.
Get the selected dedicated proxy for three days. It then renews to that plan and billing cycle unless you cancel first.
Credential security for every agent
billed monthly
* Normal API, inference, and developer-tool traffic. No per-GB fees. Fair Use Policy applies.
Add private DNS threat controls
billed monthly
* Normal API, inference, and developer-tool traffic. No per-GB fees. Fair Use Policy applies.
Talk with us about coordinated capacity, regional placement, rollout support, and consolidated purchasing for higher-scale deployments.
Plan details
Both plans protect credentials at the proxy boundary. Pro+ extends that boundary into DNS.
| Capability | Pro | Pro+ |
|---|---|---|
| Infrastructure | ||
| Dedicated proxy | 1 per subscription | 1 per subscription |
| Static IPv4 | Included | Included |
| Global regions | 17 regions | 17 regions |
| Unlimited bandwidth | Fair Use | Fair Use |
| Credential protection | ||
| Auto-Auth credential injection | Included | Included |
| Firewall-mode TLS inspection | Included | Included |
| Host-scoped encrypted vaults | Included | Included |
| Expiring, use-limited share links | Included | Included |
| Hybrid post-quantum TLS and AES-256-GCM | Included | Included |
| KMS key rotation | Included | Included |
| Policy controls | ||
| Programmable CEL rules | Included | Included |
| Human request approval | Included | Included |
| DNS security | ||
| Private DNS resolver | — | Included |
| Managed and custom blocklists | — | Included |
| DNS tunneling and DGA detection | — | Included |
| Post-quantum DNS token signing | — | ML-DSA-65 |
| Operations | ||
| Access logs and analytics | Included | Included |
| Credential expiry alerts | Email + SMS | Email + SMS |
| REST API and OS-keyring CLI | Included | Included |
| Support | ||
| Support priority | Priority | Highest priority |
Straight answers
No. Each Pro or Pro+ subscription funds one dedicated proxy. Add another subscription whenever you need another proxy, and mix Pro and Pro+ within the same account.
Yes. Add one subscription for each additional proxy. The same account can own any mix of Pro and Pro+ subscriptions, and each proxy keeps its own billing and lifecycle state.
Choose Pro or Pro+ and a billing cycle. You get the selected dedicated proxy for three days for $5. Unless you cancel before the end of the Test Drive, it renews into that plan on the selected monthly or annual cycle.
CIFP does not meter normal AI-agent API traffic or charge per gigabyte. Fair Use excludes abuse, bulk media transfer, resale, attacks, and workloads that materially degrade the service for others.
Choose Pro+ when outbound DNS policy is part of your security boundary. It adds a private resolver, managed and custom blocklists, DNS tunneling and DGA detection, and post-quantum token signing.
Yes. Manage each subscription independently from Billing. Cancellation applies only to the proxy attached to that subscription, and access continues through the paid period unless the provider states otherwise.
Yes. If you need many proxies, coordinated regional capacity, or a tailored rollout, contact us. We will scope capacity and support around your workload instead of forcing it into a generic tier.
Unlimited bandwidth, honestly defined. We do not meter normal AI-agent API traffic. Automated abuse, bulk media transfer, proxy resale, attacks, or activity that degrades service may be rate-limited or suspended. Read the Fair Use Policy.