Plans & Pricing
Subscription management is only available to organization administrators.
EntryGuard uses a simple usage-based pricing model. Start free, and only pay for what you use when you need more. All prices are in EUR.
Viewing Plans
Navigate to Billing under the Admin section in the sidebar. Your Current Plan is displayed at the top.
Pricing Overview
| Free | Pay as you go | |
|---|---|---|
| Price | €0 | Usage-based (daily billing) |
| Users | 5 included | €5/user/mo |
| Resources | 5 included | €3/resource/mo |
| Tunnels | 5 included | €6/tunnel/mo |
| Static IP Rules | 5 included | €1.50/rule/mo |
| Guest Access | - | Free |
| Max Session Duration | 4h | 24h |
| Concurrent Sessions | 1 per user | Unlimited |
| Agents | Yes | Yes |
| Roles & RBAC | Yes | Yes |
| MFA Enforcement | Yes | Yes |
| Custom Password Policy | Yes | Yes |
| Audit Logs | Yes | Yes |
| API Keys | agent:connect only | All scopes |
Free Tier
Best for teams getting started:
- 5 users, 5 resources, 5 tunnels, 5 static IP rules
- 4-hour max session duration, 1 concurrent session per user
- Agents with custom scripts (agent:connect API key included)
- Roles, MFA enforcement, password policy, audit logs
- No guest access or automation API keys (beyond agent:connect)
Pay as you go
Unlock all features and scale as you need. Usage is billed daily from prepaid credits:
| Item | Monthly Rate | Daily Rate |
|---|---|---|
| Per user | €5/mo | €0.17/day |
| Per resource | €3/mo | €0.10/day |
| Per tunnel | €6/mo | €0.20/day |
| Per static IP rule | €1.50/mo | €0.05/day |
| Guest access | Free | Free |
Free tier included: The first 5 users, 5 resources, 5 tunnels, and 5 static IP rules are not charged.
How billing works
- Prepay credits — Top up your wallet via the secure payment gateway. Amounts from €10 to €1000 per top-up; first-time upgrades get €10 free (no card required)
- Daily deduction — Each day at 1 AM UTC, credits are deducted based on your current usage (monthly rate ÷ 30, rounded up)
- Low balance — When credits run low, top up to keep your account active. Your billing page shows estimated days remaining at current usage
- Negative balance — When credits run out, daily charges continue and your balance goes negative. This tracks the debt owed
- Grace period — You have a 7-day grace period from when the balance first goes negative
- Restrictions — While your balance is negative, you cannot create new users, resources, tunnels, static IP rules, or guest access grants. All existing items continue working normally
- Top-up with debt — When you add credits, any negative balance (debt) is offset first. The remaining credits become your available balance
- No automatic downgrade — Your account stays on the paid plan with debt accumulating. Our team will reach out to discuss options
- Downgrade on demand — You can downgrade to Free at any time, provided current usage fits within Free allowances. Remaining credits stay in your wallet for later use — see Upgrade, top up, downgrade
During the grace period and beyond, daily charges continue to accumulate as debt. For example, if your daily usage is €18/day, after 7 days you would owe €126. This amount is deducted from your next credit top-up.
While in debt: existing resources, sessions, and tunnels keep working. You just can't add new ones until the balance is topped up.
What's included
- All features unlocked: agents, tunnels, guest access, MFA enforcement, custom password policies, audit logs, API keys
- 24-hour max session duration
- Unlimited concurrent sessions
- AWS, Azure, APISIX, Vercel, GCP, and agent-based resources
Exceeding Limits
If you are on the Free tier and hit your limits:
- User limit — You cannot add more users until you upgrade or remove existing ones
- Resource limit — You cannot add more resources until you upgrade or remove existing ones
- Static IP rule limit — You cannot create more static IP rules until you upgrade or delete existing ones
- Session duration — You cannot select a duration exceeding 4 hours
Upgrade to Pay as you go to remove these limits.
Next Steps
API Reference: For programmatic access, see Get Subscription.