Home / Pricing
Every tier runs on infrastructure you own — the difference between them is what the software does, never where it lives. No platform fee, no per-gigabyte charge, and no separate line for the control plane.
Small teams replacing a legacy VPN.
Billed annually · minimum 10 devices
Organisations that have to show an auditor.
Billed annually · minimum 25 devices
Multi-site, multi-tenant, or under a regulator.
Annual agreement
Pricing arguments usually come down to definitions, so here are ours before you have to ask for them.
A machine that connects. A laptop that reconnects five times a day is one device, not five. Servers you protect behind the tunnel are not charged as devices; only the things that dial in are.
No. It runs on a host you provide and you are not billed for it. That is also why there is no per-gigabyte charge — your traffic never crosses our infrastructure, so there is nothing for us to meter.
You pay for what you enrol above the minimum. Devices you revoke stop counting at the next billing period.
Yes, and nothing is reconfigured when you do — the higher tiers unlock controls in the same console against the same rules. Moving down works in reverse, though anything only the higher tier enforced stops being enforced.
Yes. Stand up the control plane, enrol a handful of devices, and run rules in report-only against real traffic. Report-only is the point — you see what a policy would have done before it does it to anyone.
Nothing here needs a procurement cycle to evaluate.