Licensing Every plan includes unlimited admin seats, cross-platform agents, and 14-day full-feature sandbox trials. Review SOC 2 & Trust Center →
DeviceTrust
Transparent B2B Licensing / No SSO tax · Unlimited employee & admin accounts

Predictable pricing per active endpoint.

Only pay for devices actively checking in during the billing cycle. Retired laptops, ephemeral VMs inactive for 14+ days, and read-only auditor seats are never billed.

Core Posture

Essential fleet visibility, self-remediation, and Vanta/Drata compliance sync for growing teams.

$5 / active device / mo Billed annually · Up to 250 endpoints
  • ✓ macOS, Windows & Linux osquery agents
  • ✓ 140+ curated security posture checks
  • ✓ Slack & browser end-user self-remediation
  • ✓ Native Vanta & Drata evidence sync
  • ✓ Admin SSO included (SAML & OIDC)
  • ✓ 30-day audit log retention
Most Popular
Business Zero Trust

Real-time IdP sign-in enforcement, custom SQL checks, EDR correlation, and SIEM log streaming.

$8 / active device / mo Billed annually · Minimum 50 endpoints
  • ✓ Everything in Core Posture, plus:
  • ✓ Okta, Entra ID EAM & Google SSO gating
  • ✓ TPM 2.0 & Apple Secure Enclave key binding
  • ✓ iOS & Android mobile posture verification
  • ✓ Custom SQL osquery policy workbench
  • ✓ CrowdStrike, SentinelOne & Defender checks
  • ✓ Streaming OCSF logs to S3 & Splunk
Enterprise

Sovereign regional residency, multi-IdP federation, Terraform automation, and 99.99% SLA.

Custom annual agreement Volume tiering for 1,000+ endpoints
  • ✓ Everything in Business, plus:
  • ✓ Multiple IdP tenants (M&A / Contractor realms)
  • ✓ US-only or EU-Frankfurt regional data residency
  • ✓ Terraform provider & GitOps policy CI/CD
  • ✓ 365-day hot telemetry retention & HIPAA BAA
  • ✓ Dedicated Solutions Architect & Slack channel
Specification Matrix

Compare plan capabilities side by side.

Capability Core Posture Business Zero Trust Enterprise
Supported Desktop Platforms macOS, Windows, Linux macOS, Windows, Linux macOS, Windows, Linux
Mobile Endpoint Posture (iOS / Android) Not included Included Included
IdP Conditional Access Blocking Audit-only mode Okta, Entra ID, Google Unlimited Multi-IdP
Hardware Key Attestation (TPM 2.0 / SEP) Inventory reporting Cryptographic Nonce Signing Cryptographic + Custom CA
Pre-Built Posture Checks 140+ checks 140+ checks 140+ checks
Custom SQL osquery Policies Up to 5 custom checks Unlimited Unlimited + GitOps API
End-User Slack & Web Self-Remediation Included Included + Custom Branding Included + Localization
Vanta & Drata Automated Evidence Included Included Included + Custom GRC
OCSF Log Streaming (S3, Splunk, Webhook) Not included Included Included + PrivateLink
Contractual Uptime SLA 99.9% 99.95% 99.99%
Procurement & Licensing FAQ

Common questions from IT and security buyers.

How do you count an “active device”?

An active device is an enrolled physical or virtual endpoint that completes at least one posture check-in during the calendar month. Decommissioned laptops or contractor machines offline for 14+ days automatically drop off your active count.

Do you charge extra for Admin SSO or SCIM?

Never. As a security vendor, we refuse to put Single Sign-On behind an enterprise paywall. SAML 2.0, OIDC, and SCIM directory sync for console administrators are included on every tier.

What happens if an employee has both a laptop and a phone?

On Business Zero Trust plans, each enrolled corporate workstation includes one companion iOS or Android mobile device for the same user at no additional charge.

Can we purchase through AWS Marketplace or a VAR?

Yes. Annual Business and Enterprise subscriptions can be transacted via AWS Marketplace Private Offers (counting toward your EDP commit) or through authorized enterprise resellers.