For AI agents: The documentation index is at https://docs.digitalocean.com/llms.txt. Markdown versions of pages use the same URL with index.html.md in place of the HTML page (for example, append index.html.md to the directory path instead of opening the HTML document).

Cloud Security Posture Management (CSPM) is available in free and paid plans. Plans determine which resources are evaluated, which features are available, and how workload coverage is billed.

Plans Overview

Free Plan

The free plan provides visibility into foundational security risks. It includes:

• Evaluation of standard resources such as access tokens and domains
• Unlimited manual scans for standard rules
• Findings and remediation guidance
• Security Advisor summarizer

The free plan does not include findings suppression or workload evaluation of Droplets and managed databases.

Basic Plan

The basic plan extends the free plan CSPM coverage to supported Droplet and managed database workloads, and adds the following capabilities:

• Findings suppression
• Quick Fix
• One workload scan per day

All CSPM scans are manual. The limit in the table is how many times per day you can run a scan that includes workload evaluation, not a scheduled job.

Workload-Based Pricing

CSPM uses a workload-based pricing model. Each supported workload with coverage enabled is billed individually at the plan rate. Supported workloads include Droplets and Managed Databases. Standard resources such as access tokens and domains are not billed.

You must explicitly enable coverage for each workload you want CSPM to evaluate. Only covered workloads are evaluated and billed. Workloads without coverage are not evaluated and are not billed.

Example

If your account contains 5 Droplets and 2 Managed Database clusters, and you enable coverage for 3 Droplets and 1 Managed Database, you are billed for 4 workloads at the basic plan rate. The remaining workloads are not evaluated and are not billed.