Plan comparison

CapabilityTrial (14 days)Paid
EndpointsUp to 25$2/endpoint, no minimum
Event retention365 days365 days
Block-by-default enforcement
All match types
Tray app + toast notifications
TOTP MFA
User invitations + RBAC
Audit log
CSV / JSON export
Email + webhook alerts
Price$0 / 14 days$2 / endpoint / month or $20 / endpoint / year, billed per license

Trial → Paid

Adding a card during or after the trial converts to Paid. There's no automatic switch - the trial expires unconverted, the agent goes fail-open, and you can come back to convert any time within the 30-day grace.

Billing model

$2 per endpoint, per month - or $20 per endpoint, per year (two months free), chosen at checkout. No minimum and no bundle - buy a single license or a thousand. Add or remove licenses one at a time from the dashboard's Billing page. On monthly billing, changes prorate against your next invoice automatically. On annual billing, added licenses are charged immediately, prorated for the remainder of your year; removed licenses take effect immediately and simply aren't included in your next renewal - the unused remainder of the year isn't credited.

The trial gives you up to 25 endpoints of capacity for the 14-day evaluation. On conversion, you pick your starting license count at checkout (defaults to your current active endpoint count) and adjust freely from there.

Capacity enforcement

Enrollment is hard-gated by paid licenses. If you have 5 licenses and try to install the agent on a 6th machine, the install fails with a "capacity exceeded" message and the dashboard prompts you to add another license. Decommissioning a machine keeps the license available for a replacement - reducing your subscription is a separate "-1 license" action on the Billing page, so a hardware swap doesn't accidentally cost you a license.

Volume pricing

Standard pricing applies up to 1,000 endpoints. For fleets above that, contact us for volume pricing.