ent ▸ review opened 0

Everything in Writ,
under enterprise control.

Turn any site into a REST endpoint and MCP tool, with SSO, audit logs, tenant isolation, and an SLA. On your own accounts and data.

Talk to sales See pricing

Writ runs on your own accounts, with your own credentials and data, on sites you are authorized to use.

req ▸ controls listed 6

What Enterprise adds

The controls a security review asks for

The whole platform, plus the access, isolation, speed, and commitments teams need to sign off.

SSO / SAML + SCIMAccess maps to your identity provider; provisioning stays in sync.

Audit logsEvery action recorded: who ran what, when, and against which target.

Tenant isolationFiltered at the data layer, so one organization never sees another.

10-second MonitorsWatch a page as often as every 10 seconds and fire a workflow the instant it changes.

Contractual SLAAn uptime commitment in writing for production workloads.

Dedicated supportA named contact, onboarding, and priority response.

What this required from your firewall: ~~no inbound rule~~ · ~~no public hostname~~ · ~~no port opened~~

Nothing dials in. The agent holds one outbound connection, and the call rides back down it. There is no inbound rule to write and no port to open.

Your own machine — free, no account, runs while it’s awake; only the result leaves.

The agent dials out. Nothing dials in — a system behind your VPN becomes callable without opening a single inbound port. Local callers can stay entirely local; add Uplink only when a remote caller needs to reach a workflow behind your firewall.

gov ▸ guardrails on 10

Governance

Guardrails finance and security trust

Cost ceilings, encrypted secrets, full audit trails, and safety rails for sensitive actions, on by default.

Hard spend capsSet ceilings per workflow and per organization so cloud time never surprises finance. On by default.

Encrypted credential vaultSecrets referenced as {{secret:key}}, encrypted at rest, never exposed in logs or to AI.

Observable runsEvery run has an ID, full step log, and timing, for debugging, audit, and chargeback.

Approval-gated actionsSensitive actions run behind spend caps, dry-run, and explicit approval gates, so a workflow can never act or overspend without sign-off.

inc ▸ platform bundled 14

Included

Everything in the platform, at your scale

The differentiators that make Writ worth standardizing on, all part of Enterprise.

Any site → a REST API + MCP toolA stable /v1/{slug}/{path} endpoint and an MCP tool for every workflow: call a no-API site and get JSON back.

The hard web, handledLogins, TOTP and email OTP two-factor, and dynamic JS, on your own authorized accounts.

Watch and actMonitors as fast as every 10 seconds trigger a workflow in seconds: back in stock, price drops, status changes.

ScribeDescribe the automation in a sentence; Writ browses the site, records the steps, and wires it up.

Self-healing + AI repairWhen selectors drift, Writ heals the target; on failure, cloud AI rewrites the recipe. AI repair is cloud-only.

Personas & 30+ stepsReliable, consistent personas, six notification channels, and 30+ step types across every run.

dep ▸ reach extended 18

Deployment

Reach systems the cloud can't

Bring your own agents and run workflows on your own hardware, inside your network, behind your VPN, against localhost and LAN-only systems. Local runs carry no compute charge, and your AI keys stay on your machine and never reach Writ servers.

Intranet access No compute charge BYO AI keys

Deployment options

CloudManaged fleet, metered by running time, autoscaled.

BYOYour agents on your hardware: free compute, intranet reach.

HybridRoute sensitive work local, burst to cloud for scale.

"Self-host" means a local / BYO agent. Writ's agent runs on your machine or network; it is not a self-hostable server you operate end to end.

How BYO agents work →

sec ▸ posture stated 22

Trust

Security posture, stated honestly

Tenantisolation by default

AESencryption at rest

GDPRDPA + erasure tooling

10sMonitor cadence

GDPR-aligned controls, a signed DPA, and documented sub-processors. Visit the Trust Center →

faq ▸ answered 28

FAQ

Enterprise questions

Do you offer SSO and SAML?

Yes. Enterprise includes SSO/SAML and SCIM provisioning so access maps to your identity provider, plus audit logs across every action.

How is our data isolated from other customers?

Every resource in Writ (workflows, monitors, personas, secrets, agents, runs, and wallet) is scoped to your organization's tenant ID and filtered at the data layer, so one organization can never see or touch another's data.

Can workflows reach our internal systems?

Yes, with a BYO agent on your own machine or network. It can reach localhost, LAN, and VPN-only systems the managed cloud cannot see, with no compute charge for those runs.

What is your compliance posture?

We align our controls with GDPR, offer a signed DPA and data-erasure tooling, and document our sub-processors. A current security review is available on request; see the Trust Center for details.

How does Enterprise billing work?

A monthly pool of included usage sized to your contract, with volume pricing, plus a prepaid top-up past it. Cloud runs are metered by actual running time; runs on your own machine carry no compute charge. Hard spend caps are on by default.

How fast can Monitors check on Enterprise?

As often as every 10 seconds, the fastest cadence on the top cloud tiers. A detected change can trigger a workflow in seconds.