Simple, Transparent Pricing
Start free. Grow with your fleet. Every plan includes the full NetDefense feature set — limits only apply to resource counts.
$ ndcli status --beta
NetDefense is currently in beta. We're evaluating the system together with our early adopters, and we welcome users to test the platform and help drive its development.
Users who participate in testing and engage in discussions in our
community forum
will receive lifetime discounts if they choose to use NetDefense commercially.
Free
Free
Non-commercial use only
100 devices
3 users
10 VPN networks
1000 snippets
Backups
Remote Admin
Coming Soon
Beta
Current Plan Free during Beta
Current default plan for all users
10 devices
5 users
3 VPN networks
500 snippets
Backups
Remote Admin
Team
Coming Soon
25 devices
Unlimited users
2 VPN networks
200 snippets
Backups
Remote Admin
Coming Soon
Business
Coming Soon
100 devices
Unlimited users
5 VPN networks
1,000 snippets
Backups
Remote Admin
Coming Soon
Enterprise
Contact Us
Custom pricing for large deployments
Unlimited
Unlimited users
Unlimited
Unlimited
Backups
Remote Admin
Full Feature Comparison
Every feature available across all plans — limits vary by tier.
| Feature | Free | Beta | Team | Business | Enterprise |
|---|---|---|---|---|---|
| Resource Limits | |||||
| Devices | 100 | 10 | 25 | 100 | Unlimited |
| Users | 3 | 5 | Unlimited | Unlimited | Unlimited |
| VPN Networks | 10 | 3 | 2 | 5 | Unlimited |
| Snippets | 1,000 | 500 | 200 | 1,000 | Unlimited |
| Core Features | |||||
| Device management Fleet overview, device detail, heartbeat monitoring | |||||
| Configuration sync Push configs to devices | |||||
| Policy templating Define once, apply everywhere | |||||
| Organizational Units Group devices, apply templates per OU | |||||
| Snippets Reusable config fragments: firewall rules, aliases, users, groups, Unbound DNS, Zabbix | |||||
| Variables Per-device and per-OU variable overrides | |||||
| Software Policies Manage OPNsense plugins across fleet | |||||
| Task automation Run, sync, backup operations | |||||
| VPN Networks WireGuard mesh networking | |||||
| CLI access ndcli command-line interface | |||||
| Web application Browser-based management dashboard | |||||
| MCP integration AI agent connectivity | |||||
| Zero inbound access Agents connect outbound only — no open ports | |||||
| API access REST API for automation and integrations | |||||
| Plan-Controlled Features | |||||
| Backups Automated device config backups | |||||
| Remote Admin Direct device access via relay tunnel | |||||
| Enterprise Only | |||||
| Security posture assessment Continuous fleet security evaluation | |||||
| Policy advisors AI-driven policy recommendations and optimization | |||||
| Compliance reports SOC 2, PCI DSS, HIPAA, GDPR reporting | |||||
| SIEM integration Security event forwarding and correlation | |||||
| SOAR integration Automated incident response orchestration | |||||
Need a custom deployment with unlimited fleets, dedicated support, or on-premise options? Contact us for Enterprise pricing.
Frequently Asked Questions
Subscriptions are per organization, not per user. Each organization has its own plan that determines the resource limits for that org. A single user can be associated with unlimited organizations, but can only be a member of up to two Free-tier organizations at the same time.
Plans are billed based on the number of devices registered in your organization. You only pay for the devices you manage.
The user limit applies per organization. An MSP can create multiple organizations for different clients. Each organization has its own user seat limit. Your MSP team members only count toward the seat limit of organizations they are actually associated with — so a team of 20 can manage dozens of client orgs without exceeding any single org's user cap.
You won't lose access to existing resources. New resource creation (devices, users, VPN networks, snippets) will be blocked until you upgrade or remove existing resources.
During beta, all users start on the Beta plan. Plan changes will be available when we launch commercial pricing.