Firezone logo light

Plans & Pricing

Starter

Secure remote access for individuals and small groups

Free

  • Works on local area networks, NAS, Raspberry Pi, data centers, and cloud VMs
  • Remote access to your homelab
  • Authenticate via email or OpenID Connect (OIDC)
  • Windows, Linux, macOS, iOS, ChromeOS, Android
  • Community Support

Enterprise

Zero trust network access for teams and organizations

Contact us

Everything in Starter, plus:

  • SSO with Google Workspace, Entra ID, and Okta
  • Automatically sync users and groups
  • Network access logs
  • Premium relay network
  • Dedicated Slack and live support

Trusted by organizations like

bunq logotribe logowolfram logorebank logosquare1 logodb11 logo

Compare plans

StarterEnterprise
Users10No limit
Service Accounts10No limit
Sites3No limit
Admins1No limit
PoliciesNo limitNo limit
ResourcesNo limitNo limit
Connected ClientsNo limitNo limit
Networking Features
NAT hole punching
Cloud & local networks
Native Firezone Clients
Split tunneling
DNS-based routing
Gateway load-balancing
Automatic Gateway failover
Global relay networkStandard performancePremium performance
Authentication & Authorization
Resource-level access policies
Email (OTP) authentication
OpenID Connect authentication
Google Workspace sync
Microsoft Entra ID sync
Okta sync
Security Features
Daily key rotation
Policy authorization logs
GeoIP Mapping
Support
Community Forums
Community Slack
Priority Email
Dedicated Slack

Frequently asked questions

How long does it take to set up Firezone?

Firezone can be set up in less than 10 minutes, and Gateways can be added by running a simple Docker command. Visit our docs for more information and step by step instructions.

Do I need to rip and replace my current VPN with Firezone?

No. As long they're set up to access different resources, you can run Firezone alongside your existing remote access solutions, and switch over whenever you’re ready. There’s no need for any downtime or unnecessary disruptions.

What happens to my data with Firezone enabled?

Network traffic is always end-to-end encrypted, and by default, routes directly to Gateways running on your infrastructure. In rare circumstances, encrypted traffic can pass through our global relay network if a direct connection cannot be established. Firezone can never decrypt the contents of your traffic.

How do I cancel or change my plan?

Please contact support if you would like to change your plan or terminate your account.

When will I be billed?

When you start service, or at the beginning of each billing cycle. Enterprise plans are billed quarterly or annually.

What payment methods are available?

The Starter plan is free and does not require a credit card to get started. Enterprise plans can be paid via credit card, ACH, or wire transfer and will have a 100% discount applied for the duration of the beta.

Do you offer special pricing for nonprofits and educational institutions?

Yes. Not-for-profit organizations and educational institutions are eligible for a 50% discount. Contact sales to request the discount.

The WireGuard® solution for Enterprise.