Simple, Transparent Pricing
Start free. Grow with your fleet. Every plan includes the full NetDefense feature set — limits only apply to resource counts.
Free
Free
Personal use
100 devices
3 users
10 VPN networks
1000 snippets
Community support
30 days task history
Backups
Remote Admin
On-Premise Deployment
Custom Reports
Read-Only Technician Access
SSO / SAML
For personal, non-commercial use. Includes the full feature set. Cannot be used to manage devices under any monetary compensation.
Team
$6 / device / mo
25 devices
Unlimited users
2 VPN networks
200 snippets
Phone & chat support
90 days task history
Backups
Remote Admin
On-Premise Deployment
Custom Reports
Read-Only Technician Access
SSO / SAML
Business
$12 / device / mo
100 devices
Unlimited users
5 VPN networks
1,000 snippets
Phone & chat support
1 year task history
Backups
Remote Admin
On-Premise Deployment
Custom Reports
Read-Only Technician Access
SSO / SAML
Enterprise
Contact Us
Custom pricing for large deployments
Unlimited
Unlimited users
Unlimited
Unlimited
24/7 phone & chat support
Custom task history
Backups
Remote Admin
On-Premise Deployment
Custom Reports
Read-Only Technician Access
SSO / SAML
Full Feature Comparison
Every feature available across all plans — limits vary by tier.
| Feature | Free | Team | Business | Enterprise |
|---|---|---|---|---|
| Resource Limits | ||||
| Devices | 100 | 25 | 100 | Unlimited |
| Users | 3 | Unlimited | Unlimited | Unlimited |
| VPN Networks | 10 | 2 | 5 | Unlimited |
| Snippets | 1,000 | 200 | 1,000 | Unlimited |
| Support | ||||
| Support Level | Community support | Phone & chat support | Phone & chat support | 24/7 phone & chat support |
| Data Retention | ||||
| Task History | 30 days | 90 days | 1 year | Custom |
| Core Features | ||||
| Device management Fleet overview, device detail, heartbeat monitoring | ||||
| Configuration sync Push configs to devices | ||||
| Policy templating Define once, apply everywhere | ||||
| Organizational Units Group devices, apply templates per OU | ||||
| Snippets Reusable config fragments: firewall rules, aliases, users, groups, Unbound DNS, Zabbix | ||||
| Variables Per-device and per-OU variable overrides | ||||
| Software Policies Manage OPNsense plugins across fleet | ||||
| Task automation Run, sync, backup operations | ||||
| Scheduled Tasks & Automation Recurring automated syncs, runs, and backups | ||||
| VPN Networks WireGuard mesh networking | ||||
| CLI access ndcli command-line interface | ||||
| Web application Browser-based management dashboard | ||||
| API & Automation Access Personal access tokens for CI/CD and scripting | ||||
| AI Assistant Integration MCP server for AI-driven fleet management | ||||
| Zero inbound access Agents connect outbound only — no open ports | ||||
| Plan-Controlled Features | ||||
| Backups Automated device config backups | ||||
| Remote Admin Direct device access via relay tunnel | ||||
| Read-Only Technician Access Delegate read-only device sessions to support staff | ||||
| Enterprise Only | ||||
| On-premise deployment Self-hosted control plane in your own infrastructure | ||||
| SSO / SAML Single sign-on with your own identity provider | ||||
| Security posture assessment Continuous fleet security evaluation | ||||
| Policy advisors AI-driven policy recommendations and optimization | ||||
| Compliance reports SOC 2, PCI DSS, HIPAA, GDPR reporting | ||||
| Custom reports Tailored reporting built around your requirements | ||||
| Security questionnaire support Assistance completing vendor security and compliance questionnaires | ||||
| SIEM integration Security event forwarding and correlation | ||||
| SOAR integration Automated incident response orchestration | ||||
| Uptime SLA Contracted uptime guarantee for your deployment | ||||
| Dedicated account manager & onboarding A named point of contact and guided onboarding | ||||
Need a custom deployment with unlimited fleets, dedicated support, or on-premise options? Contact us for Enterprise pricing.
Frequently Asked Questions
The Free plan is for personal, non-commercial use. You can use it to manage your own OPNsense devices and explore the full feature set at no cost. It cannot be used to manage devices under any monetary compensation — for example, as part of a managed service, consulting engagement, or any paid device management arrangement. For commercial use, Team or Business is the right plan.
Subscriptions are per organization, not per user. Each organization has its own plan that determines the resource limits for that org. A single user can be associated with unlimited organizations, but can only be a member of up to two Free-tier organizations at the same time.
Plans are billed based on the number of devices registered in your organization. You only pay for the devices you manage.
The user limit applies per organization. An MSP can create multiple organizations for different clients. Each organization has its own user seat limit. Your MSP team members only count toward the seat limit of organizations they are actually associated with — so a team of 20 can manage dozens of client orgs without exceeding any single org's user cap.
You won't lose access to existing resources. New resource creation (devices, users, VPN networks, snippets) will be blocked until you upgrade or remove existing resources.
Yes — you can change your plan at any time from your organization settings in the web app. Contact us at hello@netdefense.io for assistance.