Pricing

One flat price per band. No seat-by-seat math.

Pick a deployment, pick the band that fits your identity count, and that's the bill — whether you're protecting 80 logons or 800. Every protocol and every factor is included in all of them. Start with a 14-day free trial, no card needed.

Self-hosted in your environment — your data never leaves your network.
Free Trial
14-daytrial period
No credit card required
Up to 25 identities

Full access for 14 days — enough to evaluate MFA on AD, RADIUS, and your endpoints.

All access paths includedEvery factor — push, TOTP, FIDO2Community support
Start free trial
Most popular
Standard
$499/mo
Runs in your environment
Up to 500 identities

Flat rate for the whole band — 50 users or 500, same price.

Everything in FreeSelf-hosted, your infrastructureEmail support
Get in touch
Growth
$900/mo
Runs in your environment
Up to 1,000 identities

Same everything, double the headroom for a growing estate.

Everything in StandardUp to 1,000 identitiesPriority support
Get in touch
Enterprise
Custom
Volume pricing
1,000+ identities

For large estates and procurement that needs paperwork, SSO, and an SLA.

Console SSO & SAMLDedicated support + SLACustom terms & invoicing
Talk to us
The math at 250 users

Per-seat pricing punishes you for growing. Flat bands don't.

Duo Advantage bills every identity, every month. At 250 users that's roughly $1,500/mo. Authnull's on-prem Standard band is $499/mo flat — the same price you'd pay at 100 users or 500, with every protocol included.

See the full comparison
Cisco Duo · Advantage
$6 / user / mo × 250
~$1,500/mo
Authnull · Standard
flat band · ≤ 500 identities
$499/mo
~$12,000/yr less — everything included
In every plan — including the free trial

No add-on SKUs. No protocol you have to upgrade to reach.

Paid plans differ by identity count and support level — nothing else. Every access path and every factor ships in all of them, including the trial.

AD & domain logon
MFA at the domain controller — interactive, local, and break-glass accounts.
RADIUS, VPN & 802.1X
Every VPN and access gateway, no separate proxy to license.
Windows & RDP
Interactive and remote-desktop sign-in across the fleet.
Linux SSH & PAM
SSH and PAM enforcement pushed centrally to every host.
Every factor
Push, TOTP, FIDO2 / passkeys, and hardware tokens — no factor tier.
Audit-ready logs
One unified log stream for every protocol, export included.

What counts as an identity?

A human or service account that authenticates through Authnull in the billing month. Inactive accounts don't count, and we don't bill per-protocol — one identity hitting AD, RDP, and VPN is still one identity.

14-day free trial

Up to 25 identities, all protocols, no credit card. Full access for 14 days so you can evaluate MFA on AD, RADIUS, and your endpoints before committing to a plan.

Start with a free trial. Upgrade when you're ready.

Stand up MFA on AD, RADIUS, Windows, and Linux with a 14-day trial — no credit card required. Or walk your environment and your numbers with us in 20 minutes.

Get in touch