Pricing

Start with your headcount, for most organizations that is the number, because one license covers the two devices a person actually works on. If you want the exact figure rather than an estimate, the software counts it for you: open the Subscriptions menu in the console and it shows the detected user count for your network. That works on the Free plan and on any paid tier, so you can see the real number before you buy or before you renew.

One user license covers two user devices. A user device is a device generating more than 3,000 IP sessions on at least two days in a month, in other words, a device somebody is actively working on. Most people use one or two such devices, so most people are one license. This holds on every plan and in both counting modes. Endpoint agents are a separate entitlement: Unified Secure includes 5 agents for admin devices and $3/agent/month beyond that, Unified Secure Plus covers 2 per user (laptop, phone, tablet) and enterprise plans 3 per user.

No. Cameras, printers, sensors, badge readers and dormant servers fall below the activity threshold by their nature, so they are protected by the gateway without ever consuming a license. This is the sharpest difference from per-device pricing, including our own legacy NGFW plan, which counted every active device: a clinic with 15 staff and 80 medical devices is licensed on its staff devices, not on 95 endpoints.

It changes the accuracy, not the unit. Devices authenticated through your IdP (Entra, Google Workspace, Okta, SAML) are excluded from activity-based detection and counted deterministically from identity records instead, with the same two-devices-per-license cap and the same rate. What SSO buys you is named-user transparency in the console and clean, predictable true-ups.

It is possible, and it is intentional. Licensing follows actively used device pairs rather than employee records, so a device-dense organization (shared workstations, dual-issued laptops and tablets, lab or floor machines in constant use) can land above its headcount. If your qualifying devices exceed twice your employee count, the higher number is the correct one. The console shows you the detected user count.

A site is one physical location protected by a Zenarmor gateway. Every Business plan includes the first site, each additional site costs $50/site/month up to 20 sites, and larger deployments are quoted by our team.

No, Home is licensed for personal use only and is not permitted for business use, however small. It is built for households: up to 6 users, 1 gateway, 1 endpoint agent, Zenarmor Auth only and 1-day reporting retention. If you are protecting a company network, Unified Secure is the entry point, and it adds what a business needs anyway, unlimited policies, IPS, cloud IdP and captive portal authentication, gateway HA and 15-day retention.