Plan comparison
| Capability | Trial (14 days) | Paid |
|---|---|---|
| Endpoints | Up to 25 | $2/endpoint, no minimum |
| Event retention | 365 days | 365 days |
| Block-by-default enforcement | ✓ | ✓ |
| All match types | ✓ | ✓ |
| Tray app + toast notifications | ✓ | ✓ |
| TOTP MFA | ✓ | ✓ |
| User invitations + RBAC | ✓ | ✓ |
| Audit log | ✓ | ✓ |
| CSV / JSON export | ✓ | ✓ |
| Email + webhook alerts | ✓ | ✓ |
| Price | $0 / 14 days | $2 / endpoint / month, billed per active license |
Trial → Paid
Adding a card during or after the trial converts to Paid. There's no automatic switch - the trial expires unconverted, the agent goes fail-open, and you can come back to convert any time within the 30-day grace.
Billing model
$2 per endpoint, per month. No minimum and no bundle - buy a single license or a thousand. Add or remove licenses one at a time from the dashboard's Billing page; changes prorate against your next invoice automatically.
The trial gives you up to 25 endpoints of capacity for the 14-day evaluation. On conversion, you pick your starting license count at checkout (defaults to your current active endpoint count) and adjust freely from there.
Capacity enforcement
Enrollment is hard-gated by paid licenses. If you have 5 licenses and try to install the agent on a 6th machine, the install fails with a "capacity exceeded" message and the dashboard prompts you to add another license. Decommissioning a machine keeps the license available for a replacement - reducing your subscription is a separate "-1 license" action on the Billing page, so a hardware swap doesn't accidentally cost you a license.
Volume pricing
Standard pricing applies up to 1,000 endpoints. For fleets above that, contact us for volume pricing.