Sign in Get API keys
Reference

Pricing

Start on Free forever. Upgrade when you need advanced security or workforce analytics. Post-quantum crypto is on every plan. Honest limits, fully documented.

Plans

Free

Homelabs, founders, small teams.

$0 /mo forever
  • 100 machines
  • 3 users
  • Community support
Start free

No credit card required

Most popular

Business

Growing teams · 60-day free trial.

$10 /mo
  • 100 machines
  • Unlimited users
  • Priority email support
Start 60-day trial

No credit card required

Workforce

Regulated orgs, distributed workforces.

Contact sales
  • 100 machines
  • Unlimited users
  • Dedicated support + SLA
Contact sales

No credit card required

Limits — enforced and policy

Machines per orgpolicy — soft enforce

100 on every plan. Enforced by cron.ts → enforce-machine-limits every 5 min — flags excess as over_quota, not registration-time gated.

Users per orgpolicy — not hard-gated

3 on Free, unlimited on paid. Not enforced in invite flow today (Q3 2026 roadmap).

Auth keys / API keysno limit

Each can be reusable/ephemeral with configurable expiry.

Subnet routes per machineno limit

Requires org setting allow_subnet_routing + admin approval of routes.

ACL rules per orgno limit

Evaluated per-connection by acl-evaluate.ts.

Feature accessstrict

Per-plan via requireFeature(). 403 FEATURE_GATED at handler level.

Billing — current state

Razorpay-only today Payment processor is Razorpay (India, supports 100+ countries internationally). Stripe columns exist in the schema but are not wired up. International customers needing invoice/wire/cheque should contact sales@quickztna.com. Stripe integration is 2026-Q2.

Trial mechanics

  • Business plan offers a 60-day free trial, no credit card required.
  • On day 61, the trial auto-downgrades to Free via the expire-trials cron job (runs every 5 min).
  • No hard cutoff — the background job marks the plan as free and features gate accordingly.
  • Need more runway for a pilot? Contact sales for an extension.

FAQ

Is post-quantum crypto really on the Free plan?
Yes. Every WireGuard tunnel, on every plan, uses X25519 + ML-KEM-768 hybrid key exchange. It's not a paid feature — it's the default. The PSK is derived via HKDF-SHA256 from both classical and post-quantum shared secrets.
Why only Razorpay? What about Stripe / wire / invoice?
We launched in India first, so Razorpay is the self-serve default (supports 100+ countries via Razorpay International). For non-Razorpay regions or invoice/wire/cheque payment, contact sales@quickztna.com. Stripe is on the 2026-Q2 roadmap.
What happens when I hit the 100-machine limit on Free?
A background job (runs every 5 min) flags excess machines as over-quota — they stop heartbeating until you either delete old machines or upgrade. Nothing is deleted. Upgrade → features unlock immediately, quota cleared.
Can I downgrade? What happens to my data?
Yes, any time from the Billing page. Paid features gate down immediately. No data is deleted — if you downgrade then re-upgrade, everything resumes where it left off.
What does the 60-day Business trial include?
All Business-tier features. No credit card required. On day 61 the org auto-downgrades to Free via the expire-trials cron. You can extend via sales if you need more runway for a pilot.
Is there a self-hosted / on-prem option?
The architecture supports it (Docker Compose + PostgreSQL + Valkey + S3-compatible object storage), but we haven't productized it. Contact sales if you need air-gapped deployment — we do custom for regulated industries.
Are superadmins bypassing plan gates?
No. Platform superadmins have cross-org read/write for support, but plan gates are enforced at handler level. A superadmin helping a Free-tier org still hits FEATURE_GATED on paid endpoints. This is intentional.
What are the real enforced limits?
Feature gates are strict (every paid handler calls requireFeature). Machine limits are enforced post-hoc by a background cron job every 5 min, not at registration time — migrating to hard gates in Q3 2026. User limits are policy, not hard-gated in invite flow.

See also

Previous
Features