PRICING

Built for Teams That Take Security Seriously

Simple plans. No surprise charges. Start with a 14-day full-featured trial.

Starter

For small teams getting serious about endpoint security.

Up to 50 devices
Invite Only
  • Elevation Management (basic policies)
  • Device Inventory & compliance checks
  • Security Master threat scoring
  • Network connection tracking
  • Email support
  • Blue Team correlation engine
  • Microsoft 365 integration
  • Cloud App Security
  • QR tech delegation
  • Custom branding
  • Dedicated account manager
Request Invite

Business

Full-stack endpoint security for growing organizations.

Up to 500 devices
Invite Only
  • Elevation Management (advanced policies)
  • Device Inventory, compliance & Windows Update mgmt
  • Security Master threat scoring (all 7 analyzers)
  • Blue Team correlation engine
  • Network monitoring & firewall rules
  • Microsoft 365 integration
  • QR tech delegation
  • Priority email & chat support
  • Cloud App Security
  • Custom branding
  • Dedicated account manager
Request Invite

Enterprise

Unlimited scale. Unlimited control. White-glove support.

Unlimited devices
Invite Only
  • Everything in Business
  • Unlimited devices
  • Cloud App Security & shadow IT detection
  • Custom branding & white-label options
  • Dedicated account manager
  • SSO / SCIM provisioning
  • Custom integrations & API access
  • SLA-backed uptime guarantee
  • On-premise deployment option
  • Security review & architecture consultation
  • 24/7 phone, email & chat support
Contact Us

Feature Comparison

See exactly what's included in each plan.

Feature Starter Business Enterprise
Elevation Management Basic Advanced Advanced
Device Inventory
Compliance Checks
Security Master Scoring 3 analyzers All 7 All 7
Blue Team Correlation
Network Monitoring
Firewall Rules
Microsoft 365
Cloud App Security
QR Tech Delegation
Custom Branding
SSO / SCIM
API Access
Dedicated Account Mgr
Support Email Priority 24/7

Frequently Asked Questions

How does device counting work?

A device is any Windows endpoint with the CtrlLayer agent installed. Servers, workstations, and laptops each count as one device. Decommissioned devices are automatically released from your count after 30 days of inactivity.

Can I upgrade or downgrade my plan?

Yes. You can move between tiers at any time. When upgrading, the new features activate immediately. When downgrading, changes take effect at the next billing cycle.

Is there a free trial?

We offer a 14-day full-featured trial of the Business tier — no credit card required. Request an invite to get started.

What payment methods do you accept?

We accept all major credit cards and can arrange invoicing for Enterprise customers. Annual billing is available on all plans.

Do you offer discounts for nonprofits or education?

Yes. Qualified nonprofit organizations and educational institutions receive a 25% discount on any tier. Contact us for details.

Ready to Take Control?

Request your invite and see what zero-trust elevation actually looks like.

Request Invite