Pricing

One flat price per band. No seat-by-seat math.

Pick a deployment, pick the band that fits your identity count, and that's the bill — whether you're protecting 80 logons or 800. Every protocol and every factor is included in all of them. The free tier stays free.

Self-hosted in your environment — your data never leaves your network.
Free
$0forever
No credit card
Up to 25 identities

Enough to close a single audit finding or cover a small admin team.

All access paths includedEvery factor — push, TOTP, FIDO2Community support
Get in touch
Most popular
Standard
$499/mo
Runs in your environment
Up to 500 identities

Flat rate for the whole band — 50 users or 500, same price.

Everything in FreeSelf-hosted, your infrastructureEmail support
Get in touch
Growth
$900/mo
Runs in your environment
Up to 1,000 identities

Same everything, double the headroom for a growing estate.

Everything in StandardUp to 1,000 identitiesPriority support
Get in touch
Enterprise
Custom
Volume pricing
1,000+ identities

For large estates and procurement that needs paperwork, SSO, and an SLA.

Console SSO & SAMLDedicated support + SLACustom terms & invoicing
Talk to us
The math at 250 users

Per-seat pricing punishes you for growing. Flat bands don't.

Duo Advantage bills every identity, every month. At 250 users that's roughly $1,500/mo. Authnull's on-prem Standard band is $499/mo flat — the same price you'd pay at 100 users or 500, with every protocol included.

See the full comparison
Cisco Duo · Advantage
$6 / user / mo × 250
~$1,500/mo
Authnull · Standard
flat band · ≤ 500 identities
$499/mo
~$12,000/yr less — everything included
In every plan — including Free

No add-on SKUs. No protocol you have to upgrade to reach.

Bands differ by identity count and support level — nothing else. Every access path and every factor ships in all of them.

AD & domain logon
MFA at the domain controller — interactive, local, and break-glass accounts.
RADIUS, VPN & 802.1X
Every VPN and access gateway, no separate proxy to license.
Windows & RDP
Interactive and remote-desktop sign-in across the fleet.
Linux SSH & PAM
SSH and PAM enforcement pushed centrally to every host.
Every factor
Push, TOTP, FIDO2 / passkeys, and hardware tokens — no factor tier.
Audit-ready logs
One unified log stream for every protocol, export included.

What counts as an identity?

A human or service account that authenticates through Authnull in the billing month. Inactive accounts don't count, and we don't bill per-protocol — one identity hitting AD, RDP, and VPN is still one identity.

The free tier stays free

Up to 25 identities, all protocols, no credit card, no expiry. Plenty to close a single audit finding or protect a small admin team — keep it as long as it fits.

Start on the free tier. Upgrade when the band fills up.

Stand up MFA on AD, RADIUS, Windows, and Linux this week — no credit card to start. Or walk your environment and your numbers with us in 20 minutes.

Get in touch