Simple pricing,
no surprises
Start free, scale as you grow. Every plan includes unlimited users, the full agent, mesh networking, and zero-trust security. You only pay per device — never per seat.
Starter
10 devices free forever — automatic volume pricing above that. Unlimited users included. All new accounts start with a 30-day Pro trial.
- ✓ Unlimited users — no per-seat fees
- ✓ 30-day Pro trial · 25 devices
- ✓ Devices 1–10: free forever
- ✓ Devices 11–25: $5/device/mo
- ✓ Devices 26+: $4/device/mo (20% volume discount, auto-applied)
- ✓ Mesh SD-WAN overlay (L3)
- ✓ Zero-trust enrollment
- ✓ Basic policy engine
- ✓ DNS stub resolver
- ✓ Community support
Pro
For growing teams that need advanced management and enforcement. Unlimited users, per-device pricing. Every account starts here with a 30-day free trial.
- ✓ Unlimited users — no per-seat fees
- ✓ Unlimited devices
- ✓ Devices 1–500: $10/device/mo
- ✓ Devices 501+: $8/device/mo (20% volume discount, auto-applied)
- ✓ Virtual Wire — full L3–L7 stack
- ✓ Full policy engine with mesh propagation
- ✓ ScriptPacks & job orchestration
- ✓ DNS policy engine with blocklists
- ✓ SSO integration (SAML/OIDC)
- ✓ Directory sync (Google, Azure, GitHub)
- ✓ Edge Endpoints — relay, NAT/egress & DNS authority
- ✓ Vulnerability scanning (NVD, OSV, GitHub, CIRCL, OpenCVE)
- ✓ Threat detection (FIM, Sigma, YARA)
- ✓ Trusted certificates — deploy custom CAs to agents
- ✓ Staged rollouts & auto-rollback
- ✓ Remote access with approvals
- ✓ Email support + 24h SLA
Enterprise
For organisations with compliance requirements and large fleets. Unlimited users, fully custom per-device pricing, volume discounts negotiated separately.
- ✓ Unlimited users — no per-seat fees
- ✓ Fully negotiated per-device rate
- ✓ Volume discounts negotiated separately
- ✓ Everything in Pro
- ✓ Virtual Wire — advanced networking with VRF/VLAN egress
- ✓ Dedicated Edge Endpoints — private relay & egress
- ✓ Edge Endpoint VLAN egress & VRF isolation
- ✓ Custom update channels
- ✓ OIDC federation (coming soon)
- ✓ Audit log export & SIEM integration
- ✓ Priority support · 1 hour response time
Volume discounts apply automatically. As your organisation grows, per-device rates drop at each threshold — no contract, no sales call, no manual step.
Compare plans
| Feature | Starter | Pro | Enterprise |
|---|---|---|---|
| Users Included | Unlimited | Unlimited | Unlimited |
| Devices | 10 free · 11–25 $5/mo · 26+ $4/mo | Unlimited · 1–500 $10/mo · 501+ $8/mo | Unlimited (custom pricing) |
| Virtual Wire | L3 overlay | L3–L7 | L3–L7 + VRF/VLAN |
| Mesh SD-WAN | ✓ | ✓ | ✓ |
| Zero-Trust Enrollment | ✓ | ✓ | ✓ |
| Policy Engine | Basic | Full + Mesh Propagation | Full + Mesh Propagation |
| ScriptPacks & Jobs | — | ✓ | ✓ |
| DNS Policy Engine | Stub only | Full + Blocklists | Full + Blocklists |
| Mesh-Assisted DNS | — | ✓ | ✓ |
| SSO (SAML/OIDC) | — | ✓ | ✓ |
| Directory Sync (Google, Azure, GitHub) | — | ✓ | ✓ |
| OIDC Federation | — | — | Coming Soon |
| Remote Access | — | With Approvals | With Transcripts |
| Staged Rollouts | — | ✓ | ✓ |
| Vulnerability Scanning (5 CVE sources) | — | ✓ | ✓ |
| Threat Detection (FIM, Sigma, YARA) | — | ✓ | ✓ |
| Trusted Certificates (Custom CA Deployment) | — | ✓ | ✓ |
| Audit Logging | 7 days | 90 days | Unlimited + Export |
| Edge Endpoints — Relay & Egress | — | 3 Maximum | Unlimited |
| Edge Endpoint DNS Authority | — | ✓ | ✓ |
| Edge Endpoint VLAN Egress & VRF | — | — | ✓ |
| Edge Endpoint SNMP Discovery | — | — | ✓ |
| Support | Community | Email (24h) | Priority (1h SLA) |
Frequently asked questions
Most competitors charge per user or per seat — meaning your bill scales with headcount, not infrastructure. ORBTR charges per device because that's what actually consumes resources. Add your entire organisation — admins, contractors, read-only auditors — at no extra cost on every plan.
Any machine running the ORBTR agent counts as one device — servers, laptops, VMs, and containers each count individually. Inactive devices (offline >30 days) don't count toward your limit.
Yes. Upgrade or downgrade at any time from your account settings. Upgrades take effect immediately with prorated billing; downgrades apply at the end of your current billing period.
All mesh traffic is end-to-end encrypted using Noise protocol with Ed25519 key binding. Data at rest is encrypted using OS-level key management (Keychain on macOS, TPM where available). Device keys never leave the host.
Yes — and they apply automatically. As your fleet crosses each tier threshold, the per-device rate drops without any contract, sales call, or manual step:
- Starter: devices 1–10 free; 11–25 at $5/device/mo; devices 26+ at $4/device/mo (20% volume discount).
- Pro: devices 1–500 at $10/device/mo; devices 501+ at $8/device/mo (20% volume discount).
- Enterprise: fully custom pricing with volume discounts negotiated separately.
Every account starts with a 30-day free trial of the Pro tier with up to 25 devices. After the trial, your first 10 devices remain free forever on the Starter plan. Additional devices are billed at $5/device/month (devices 11–25) or $4/device/month (devices 26+) on Starter, or $10/device/month (first 500) / $8/device/month (501+) on Pro — volume discounts apply automatically. All data is preserved — no data is deleted; inactive devices simply pause syncing.
Virtual Wire is ORBTR's network virtualization layer. Unlike traditional VPNs that only operate at Layer 3 and route all traffic through a central gateway, Virtual Wire gives you an encrypted mesh overlay (L3), per-flow transport policy (L4), Noise-encrypted sessions (L5), and a full DNS policy engine (L7) — all agent-native with no gateway appliance. The Starter free tier includes the L3 mesh overlay; Pro and Enterprise unlock the full policy engine, virtual networks, and DHCP bridging.