Pricing

One flat price per band. No seat-by-seat math.

Pick the band that fits your identity count, and that's the bill — whether you're protecting 80 logons or 800. Every protocol and every factor is included in all of them. Self-hosted in your environment, with an optional 1-month free trial on every plan.

Most popular
Standard
$499/mo
Runs in your environment
Up to 500 identities

Flat rate for the whole band — 50 users or 500, same price.

All access paths includedSelf-hosted, your infrastructureEmail support
Get in touch 1-month free trial
Growth
$900/mo
Runs in your environment
Up to 1,000 identities

Same everything, double the headroom for a growing estate.

Everything in StandardUp to 1,000 identitiesPriority support
Get in touch 1-month free trial
Enterprise
Custom
Volume pricing
1,000+ identities

For large estates and procurement that needs paperwork, SSO, and an SLA.

Console SSO & SAMLDedicated support + SLACustom terms & invoicing
Talk to us 1-month free trial
The math at 250 users

Per-seat pricing punishes you for growing. Flat bands don't.

Duo Advantage bills every identity, every month. At 250 users that's roughly $1,500/mo. Authnull's on-prem Standard band is $499/mo flat — the same price you'd pay at 100 users or 500, with every protocol included.

See the full comparison
Cisco Duo · Advantage
$6 / user / mo × 250
~$1,500/mo
Authnull · Standard
flat band · ≤ 500 identities
$499/mo
~$12,000/yr less — everything included
In every plan

No add-on SKUs. No protocol you have to upgrade to reach.

Plans differ by identity count and support level — nothing else. Every access path and every factor ships in all of them, with a 1-month free trial available on any plan.

AD & domain logon
MFA at the domain controller — interactive, local, and break-glass accounts.
RADIUS, VPN & 802.1X
Every VPN and access gateway, no separate proxy to license.
Windows & RDP
Interactive and remote-desktop sign-in across the fleet.
Identity governance
IGA built in — access reviews, certification, and lifecycle for every identity.
Every factor
Push, TOTP, FIDO2 / passkeys, and hardware tokens — no factor tier.
Audit-ready logs
One unified log stream for every protocol, export included.

What counts as an identity?

A human or service account that authenticates through Authnull in the billing month. Inactive accounts don't count, and we don't bill per-protocol — one identity hitting AD, RDP, and VPN is still one identity.

1-month free trial

Any plan can start with a free month, full access, before billing kicks in — so you can evaluate MFA on AD, RADIUS, and your endpoints on the band that actually fits your estate.

Start with a free month. Upgrade when you're ready.

Stand up MFA and identity governance on AD, RADIUS, and Windows with a 1-month free trial on any plan — deployed in days, not months.

Get in touch