Plan comparison
| Capability | Trial (14 days) | Paid |
|---|---|---|
| Endpoints | Up to 10 | $3/endpoint, sold in 10-packs |
| Event retention | 365 days | 365 days |
| Block-by-default enforcement | ✓ | ✓ |
| All match types | ✓ | ✓ |
| Tray app + toast notifications | ✓ | ✓ |
| TOTP MFA | ✓ | ✓ |
| User invitations + RBAC | ✓ | ✓ |
| Audit log | ✓ | ✓ |
| CSV / JSON export | ✓ | ✓ |
| Email + webhook alerts | ✓ | ✓ |
| Price | $0 / 14 days | $30 / month (10 endpoints), $3/endpoint thereafter |
Trial → Paid
Adding a card during or after the trial converts to Paid. There's no automatic switch — the trial expires unconverted, the agent goes fail-open, and you can come back to convert any time within the 30-day grace.
Billing model
$3 per endpoint, per month. Sold in 10-endpoint packs (so the minimum subscription is 10 endpoints / $30 / month). Add or remove a 10-pack any time from the dashboard's Billing page; changes prorate against your next invoice automatically.
The trial gives you one 10-pack's worth of capacity (10 endpoints) for the 14-day evaluation. On conversion, capacity stays at 10; add more from the Billing page once you deploy further.
Capacity enforcement
Enrollment is hard-gated by paid capacity. If you have 10 endpoints purchased and try to install the agent on an 11th machine, the install fails with a "capacity exceeded" message and the dashboard prompts you to add another 10-pack. Decommissioning an endpoint frees a slot under your existing capacity but doesn't reduce your subscription — that's a separate "-10 endpoints" action on the Billing page.
Volume pricing
Standard pricing applies up to 1,000 endpoints. For fleets above that, contact us for special pricing.