Simple pricing,
no surprises
Start free, scale as you grow. Every plan includes unlimited users, the full agent, mesh networking, and zero-trust security. You only pay per device — never per seat.
Starter
9 devices free forever — $8/device/mo for additional. Unlimited users included. All new accounts start with a 30-day Pro trial.
- ✓ Unlimited users — no per-seat fees
- ✓ 30-day Pro trial · 25 devices
- ✓ 9 devices free forever after trial
- ✓ $8/device/mo over 9 devices
- ✓ Mesh SD-WAN overlay (L3)
- ✓ Zero-trust enrollment
- ✓ Basic policy engine
- ✓ DNS stub resolver
- ✓ Community support
Pro
For growing teams that need advanced management and enforcement. Unlimited users, per-device pricing. Every account starts here with a 30-day free trial.
- ✓ Unlimited users — no per-seat fees
- ✓ Unlimited devices
- ✓ Virtual Wire — full L3–L7 stack
- ✓ Full policy engine with mesh propagation
- ✓ ScriptPacks & job orchestration
- ✓ DNS policy engine with blocklists
- ✓ SSO integration (SAML/OIDC)
- ✓ Edge Endpoints — relay, NAT/egress & DNS authority
- ✓ Vulnerability scanning (NVD, OSV, GitHub, CIRCL, OpenCVE)
- ✓ Threat detection (FIM, Sigma, YARA)
- ✓ Staged rollouts & auto-rollback
- ✓ Remote access with approvals
- ✓ Email support + 24h SLA
Enterprise
For organisations with compliance requirements and large fleets. Unlimited users, custom pricing.
- ✓ Unlimited users — no per-seat fees
- ✓ Everything in Pro
- ✓ Virtual Wire — advanced networking with VRF/VLAN egress
- ✓ Dedicated Edge Endpoints — private relay & egress
- ✓ Edge Endpoint VLAN egress & VRF isolation
- ✓ HSM-backed tenant keys
- ✓ Custom update channels
- ✓ Directory sync (AD/LDAP) (Pro+)
- ✓ Audit log export & SIEM integration
- ✓ SOC 2-aligned controls
- ✓ Priority support · 1 hour response time
Compare plans
| Feature | Starter | Pro | Enterprise |
|---|---|---|---|
| Users Included | Unlimited | Unlimited | Unlimited |
| Devices | 9 free (25 during Pro trial) | Unlimited | Unlimited |
| Virtual Wire | L3 overlay | L3–L7 | L3–L7 + VRF/VLAN |
| Mesh SD-WAN | ✓ | ✓ | ✓ |
| Zero-Trust Enrollment | ✓ | ✓ | ✓ |
| Policy Engine | Basic | Full + Mesh Propagation | Full + Mesh Propagation |
| ScriptPacks & Jobs | — | ✓ | ✓ |
| DNS Policy Engine | Stub only | Full + Blocklists | Full + Blocklists |
| Mesh-Assisted DNS | — | ✓ | ✓ |
| SSO (SAML/OIDC) | — | ✓ | ✓ |
| Directory Sync (AD/LDAP) | — | ✓ | ✓ |
| Remote Access | — | With Approvals | With Transcripts |
| Staged Rollouts | — | ✓ | ✓ |
| Vulnerability Scanning (5 CVE sources) | — | ✓ | ✓ |
| Threat Detection (FIM, Sigma, YARA) | — | ✓ | ✓ |
| Audit Logging | 7 days | 90 days | Unlimited + Export |
| Edge Endpoints — Relay & Egress | — | 3 Maximum | Unlimited |
| Edge Endpoint DNS Authority | — | ✓ | ✓ |
| Edge Endpoint VLAN Egress & VRF | — | — | ✓ |
| Edge Endpoint SNMP Discovery | — | — | ✓ |
| Support | Community | Email (24h) | Priority (1h SLA) |
Frequently asked questions
Most competitors charge per user or per seat — meaning your bill scales with headcount, not infrastructure. ORBTR charges per device because that's what actually consumes resources. Add your entire organisation — admins, contractors, read-only auditors — at no extra cost on every plan.
Any machine running the ORBTR agent counts as one device — servers, laptops, VMs, and containers each count individually. Inactive devices (offline >30 days) don't count toward your limit.
Yes. Upgrade or downgrade at any time from your account settings. Upgrades take effect immediately with prorated billing; downgrades apply at the end of your current billing period.
All mesh traffic is end-to-end encrypted using Noise protocol with Ed25519 key binding. Data at rest is encrypted using OS-level key management (Keychain on macOS, TPM where available). Device keys never leave the host.
Enterprise plans include custom pricing based on fleet size. For Pro annual commitments over 500 devices, contact our sales team for volume pricing.
Every account starts with a 30-day free trial of the Pro tier with up to 25 devices. After the trial, your first 9 devices remain free forever on the Starter plan. Additional devices are billed at $8/device/month on Starter, or $16/device/month to stay on Pro. All data is preserved — no data is deleted; inactive devices simply pause syncing.
Virtual Wire is ORBTR's network virtualization layer. Unlike traditional VPNs that only operate at Layer 3 and route all traffic through a central gateway, Virtual Wire gives you an encrypted mesh overlay (L3), per-flow transport policy (L4), Noise-encrypted sessions (L5), and a full DNS policy engine (L7) — all agent-native with no gateway appliance. The Starter free tier includes the L3 mesh overlay; Pro and Enterprise unlock the full policy engine, virtual networks, and DHCP bridging.