Skip to main content

Upgrade, Top Up & Downgrade

Admin Only

Billing actions are only available to organization administrators.

EntryGuard has two tiers:

  • Free — 5 users, 5 resources, 5 tunnels, 5 static IP rules, 4-hour sessions, 1 concurrent session per user, agents and MFA included.
  • Paid — pay-as-you-go. Credits are deducted daily based on current usage; the first 5 of each item type remain free. All features unlocked, 24-hour sessions, unlimited concurrency.

The Billing page is where you move between them.

Activate the Paid plan​

If your organization is on Free and has never upgraded before, you'll see an Activate Paid Plan button near the top of the Billing page.

  1. Click Activate Paid Plan.
  2. Confirm in the dialog. EntryGuard credits €10 to your organization's wallet — no card required, charged once per organization lifetime.
  3. Your tier flips to Paid immediately. Paid features (tunnels, guest access, full-scope API keys) become available.

The €10 starter is enough to run a small organization (a few users, a couple of resources) for roughly a month while you evaluate. Once the balance runs out, top up to continue.

Top up credits​

The Top up credits card accepts amounts between €10 and €1000. Preset chips are €10 / €25 / €50 or use the custom input for anything in range.

  1. Pick an amount (or type one in).
  2. Click Pay €… — you're sent to the payment gateway.
  3. Enter your card details and approve the transaction.
  4. Credits are added to your wallet immediately on approval. A PDF receipt is saved to the Payment History section.

Topping up a Free organization with leftover credits does not automatically upgrade it; see Reactivate Paid below.

Reactivate Paid​

If you previously downgraded to Free but still have credits in your wallet, you'll see a Reactivate Paid Plan button instead of the Activate one. Clicking it flips your tier back to Paid without touching the wallet or granting new credits — you resume spending the balance you already have.

Downgrade to Free​

Your organization can be downgraded at any time, as long as your current usage fits within Free-plan allowances.

Click Downgrade to Free on the Billing page. If anything exceeds Free limits, the button stays disabled and the blockers are listed inline, for example:

  • 8 active users (Free allows 5)
  • 2 guest access grants — Free plan doesn't support guest access

Clean those up (delete excess users, resources, tunnels, static IP rules; revoke guest access grants) and the button unlocks.

On downgrade:

  • Tier flips to Free; item limits drop to 5 / 5 / 5 / 5.
  • Any remaining credits stay in your wallet (Free orgs aren't billed, so credits just sit idle).
  • Active sessions continue normally. New sessions get the 4-hour cap.
  • To come back to Paid later, use Reactivate Paid (no deposit needed) or top up.

What counts as "usage"​

Each day at 1 AM UTC, EntryGuard snapshots your counts for users, resources, tunnels, static IP rules and deducts (monthly rate ÷ 30, rounded up) credits. The first 5 of each type aren't charged. The live Usage card on the Billing page shows exactly what's billable today and the estimated daily burn.

Running out of credits​

If your balance goes negative, your organization enters Past Due:

  • Existing users, resources, tunnels, static rules, and sessions keep working.
  • New item creation is blocked until you top up.
  • Daily deductions continue, so debt accumulates.
  • Adding credits while in debt first offsets the debt, then the remainder becomes available balance.
  • There is no automatic downgrade — your organization stays on Paid with debt tracked in the credit ledger.

Next Steps​