Pricing

Pay for the identities that authenticate.
Nothing else.

Two plans, metered monthly on the people and devices that actually connect. Switches, access points, and controllers are never billed for the RADIUS authentication they carry. All prices in USD.

Business

Simple, metered, no minimum seat count.

  • $3per active user, per month
  • $1per active device, per month
  • $50monthly minimum

$50 is charged at signup and credited to your account. It covers your first month for up to 16 users or 50 devices.

  • Cloud RADIUS and RadSec, unlimited network devices
  • EAP-TLS certificates, Signing CA, and SCEP onboarding
  • Policy engine and posture checks
  • Change of Authorization (CoA) over RadSec, for network devices that support it (for example Cisco and Aruba)
  • Cloud TACACS+ over TLS for network device administration
  • Admin portal, audit logs, alerting, and reports
Get started — $50 to begin

Enterprise

A base fee, then the same per-identity metering.

  • $149base fee, per month
  • $5per active user, per month
  • $1per active device, per month

For anything that runs inside your network or integrates with your other vendors. Every feature is available to every account. Switching on an Enterprise feature, such as the virtual appliance, asks an account owner to accept the Enterprise plan.

  • Everything in Business
  • Virtual appliance: Active Directory (PEAP/MSCHAPv2) and on-premises TACACS+
  • Change of Authorization (CoA) through the virtual appliance or on-premises connector, for network devices without RadSec CoA (for example Ubiquiti)
  • Multi-site management and regional deployment
  • SAML single sign-on for administrators
  • SIEM connectors, syslog forwarding, and compliance report packs
  • IoT profiling
Talk to us

Estimate

What would your month cost?

Enter how many distinct people and devices authenticate in a typical month, as whole numbers up to 1,000,000 each. The figure updates as you type.

Plan
$115 25 users × $3 + 40 devices × $1

Estimates are before tax. The estimator covers up to 1,000,000 users and 1,000,000 devices; billing itself has no cap. Usage is metered from your authentication logs, so a quiet month costs less than a busy one.

How metering works

Clear rules, read straight from the authentication log.

RADIUS network devices are free
Switches, access points, controllers, and every other RADIUS client are unlimited on both plans in their RADIUS role: the authentications they carry are never a device charge. You never pay for plumbing.
Users vs devices
A user is a person who authenticates, over 802.1X, TACACS+, or a certificate. A device is a MAC-authenticated endpoint or a machine that signs in on its own.
One identity, one charge
The same person on a laptop, a phone, and a switch console counts once when they authenticate as the same normalized identity within the month. For RADIUS the identity is the login's email address when it carries one, otherwise the username; for TACACS+ it is always the username; both are lowercased. Two different normalized identities are counted separately.
Certificate authentication
When a user certificate and a machine certificate authenticate together, only the user is billed. The machine is not counted again.
TACACS+ managed devices
Network equipment that administrators sign into through TACACS+ counts as a device at $1 per month. RADIUS network devices remain free.
Metered from logs
Counts come from accepted authentications in your logs, not from a directory, so you pay only for identities that actually connect.
No proration
The Business minimum and the Enterprise base fee are charged in full for every month in which your account is still active when that month's charge is calculated, shortly after the month ends. There is no proration for a partial first or last month, or for a month in which you change plans. The $50 paid at signup is that first Business month.
Plan changes
Switching on an Enterprise feature moves your account to Enterprise as soon as an account owner accepts. Any month in which your account is on Enterprise at any point is billed as Enterprise, in full. Moving to Business takes effect at the end of the month. Virtual appliances and SAML sign-in must be removed first; other Enterprise features stop, and their settings are kept. Business pricing applies from the following month.

Questions

The short answers.

What does the $50 at signup cover?

It is your first Business payment, credited to your account in full. Your first invoice draws from that credit, and the monthly minimum means a small network is fully covered by it.

Can I try Business before paying?

No. Business starts at $50, and that amount is credited, not lost. You can cancel at any time. There is no proration: a month in which your account is still active when its charge is calculated is billed in full.

Which currency do you bill in?

All plans are billed in US dollars. Applicable taxes are added at invoice time.

How do I move between plans?

Switch on an Enterprise feature and, once an account owner accepts, your account is on Enterprise. Any month in which your account is on Enterprise at any point is billed as Enterprise, in full. Moving to Business takes effect at the end of the month. Virtual appliances and SAML sign-in must be removed first; other Enterprise features stop, and their settings are kept. Business pricing applies from the following month.

How do I get Enterprise?

Switch on an Enterprise feature, such as the virtual appliance for Active Directory, and an account owner accepts the Enterprise plan when prompted. Or email support@radiarch.com and we will set it up with you.

Ready when you are

Start with Business today.