Free
$0
forever
Stand up a real sovereign mesh: one overlay, your first devices, at no cost.
- 1 mesh overlay
- Up to 20 devices / peers
- Zero-knowledge enrollment + wg-config
- MagicDNS + DERP relay fallback
- wg-node-agent (self-serve)
- Community support
Pricing
Start free with a real sovereign mesh. Then pay for connected devices, user seats (ZTNA + SASE) and relayed egress — direct, hole-punched peer paths never touch a relay, so they never show up as a charge. Self-host the whole control plane on Enterprise. Every number here is indicative and TBD.
Pricing
Start free with a real mesh. Then pay for connected devices, user seats (ZTNA + SASE) and relayed egress — direct, hole-punched peer paths never touch a relay, so they never show up as a charge. Self-host the whole control plane on Enterprise.
Indicative — every number here is a placeholder for this scaffold. Real prices TBD.
Stand up a real sovereign mesh: one overlay, your first devices, at no cost.
Pay for the devices and seats you connect, plus relay egress. Direct peer paths are free.
SSO, RBAC and higher quotas for a team running production private access.
Run the whole control plane in your own region, with sovereign DERP and compliance.
Plan comparison
| Feature | Free | Usage | Team | Enterprise / Self-hosted |
|---|---|---|---|---|
| Mesh overlays | 1 | Unlimited | Unlimited | Unlimited |
| Connected devices | 20 | $4 / device | $4 / device | Committed / custom |
| User seats (ZTNA + SASE) | — | $6 / seat | $6 / seat | Committed / custom |
| Zero-knowledge enrollment | ✓ | ✓ | ✓ | ✓ |
| UPO policy compiler | — | ✓ | ✓ | ✓ |
| SASE (SWG/CASB/FWaaS/DLP) | — | ✓ | ✓ | ✓ |
| SD-WAN + EVE-NG labs | — | ✓ | ✓ | ✓ |
| SSO + RBAC | — | — | ✓ | ✓ |
| Signed audit export | — | — | ✓ | 7-year retention |
| Self-hosted control plane | — | — | — | ✓ |
| Dedicated DERP + residency classes | — | — | — | ✓ |
| Support | Community | Priority | SLA + DPA |
Indicative pricing for this scaffold — real prices are TBD. Metering (SS-60) records direct peer paths as zero-rated and only bills relayed egress; billing rolls up through SS-10.
Get started
Start on the free tier — no card required. Identity, keys, metering and billing are wired in from the first call, and the control plane never touches a private key.