Priced by Engineers, for Engineers
Unified secure access for every protocol. Simple plans, predictable pricing.
Solo includes SSH + Secure Network Access for individuals. Team and above unlock the full protocol suite. Business adds Kubernetes, gRPC, and Telnet access with simple per-user pricing.
14-day free trial
No credit card required
Built-in Secure Network Access
Solo
For a single user
$9
per month
SSH access with session recording
Secure Network Access (1 peer)
Basic SSO & MFA enforcement
Audit logs & native CLI
Basic alerting & email notifications
15 resources, 14-day retention
Single-user org, 15 resources max
No RDP, database, or web app access
No SAML/OIDC SSO or RBAC
Team
For teams of any size
$15
per user / month, billed annually
Everything in Solo, plus:
Multi-user organisation
RDP, Database & Web App access
SAML/OIDC SSO & Teams RBAC
Secure Network Access (5 peers)
Audit log export, API & Terraform
Basic alerting & notifications (Email, Slack, Discord, Teams)
200 resources, 30-day retention
No JIT access or approval workflows
No Kubernetes, gRPC, or Telnet access
No dedicated gateways or SIEM
Recommended
Business
For compliance-ready teams
$22
per user / month, billed annually
Everything in Team, plus:
Kubernetes API proxy & kubectl exec recording
gRPC-aware proxy with per-method ACL
Telnet gateway with session recording
Just-in-Time access & approval workflows
Dedicated gateways
Unlimited resources, network access & web apps
Security policies (reauth, idle timeout, MFA)
Advanced alerting & all notification channels
SOC 2, SIEM & compliance reports
Session risk analysis & endpoint posture
500 GB storage, 90-day retention
Priority support
Everything in Business, plus:
Unlimited resources & network access peers
Kubernetes cluster auto-discovery
HIPAA & compliance attestation
Dedicated deployment managed by PumaGate
1-year retention, 2 TB+ storage
SLA-backed dedicated support
Core Features
Core protocols with clear tiering
Solo includes SSH + Secure Network Access. Team adds RDP, VNC, databases, and web apps. Business and Enterprise add Kubernetes, gRPC, and Telnet — all with Zero Trust controls.
SSH Access
RDP Access
Database Access
Web App Access
Kubernetes Access (Business+)
gRPC Proxy (Business+)
Telnet Access (Business+)
Secure Network Access
Session Recording (all protocols)
SSO Integration
Unified Audit Logs
MFA Enforcement
Comparison
Compare plans
See what's included in each tier at a glance.
| Feature | Solo | Team | Business | Enterprise |
|---|---|---|---|---|
| Pricing & Limits | ||||
| Per-user price (monthly / annual) | $9 | $19 / $15 | $29 / $22 | Custom |
| Users | 1 (single-user org) | Multi-user (per-seat) | Multi-user (per-seat) | Multi-user (per-seat) |
| Resources included | 15 | 200 | Unlimited | Unlimited |
| Session retention / storage | 14 days / 2 GB | 30 days / 100 GB | 90 days / 500 GB | 1 year / 2 TB+ |
| Access Types | ||||
| SSH access | ||||
| RDP, Database & Web App access | ||||
| Kubernetes, gRPC & Telnet access | ||||
| Secure Network Access (WireGuard) | ||||
| Session & Recording | ||||
| Session recording & playback | ||||
| Keystroke logging & clipboard controls | ||||
| File transfer audit & risk analysis | ||||
| Identity & Access | ||||
| Basic SSO & MFA enforcement | ||||
| SAML/OIDC SSO & Teams RBAC | ||||
| Just-in-Time access & approval workflows | ||||
| SCIM provisioning | ||||
| Machine identity (service accounts) | ||||
| Compliance & Audit | ||||
| Audit logs & export | View only | |||
| SOC 2, SIEM & compliance reports | ||||
| HIPAA support | ||||
| Infrastructure | ||||
| Customer-managed gateway | ||||
| Dedicated gateways | ||||
| Dedicated deployment managed by PumaGate | ||||
| Network Access | ||||
| Network access peers per user | 1 | 5 | Unlimited | Unlimited |
| Split tunneling, custom DNS & mesh | ||||
| Notifications & Alerting | ||||
| Basic notifications (Email, Slack, Discord, Teams) | Email only | |||
| Advanced integrations (PagerDuty, Opsgenie, webhooks) | ||||
| Basic alerting (endpoint online/offline) | ||||
| Advanced alerting (anomaly, threshold, risk) | ||||
| Escalation policies | ||||
| Alert rules limit | 2 | 10 | 100 | Unlimited |
| Security Policies | ||||
| Re-authentication & idle timeout policies | ||||
| Max concurrent sessions & MFA enforcement | ||||
| Team-level policy overrides | ||||
| Advanced Features | ||||
| API access | ||||
| Query logging & Terraform provider | ||||
| Data masking & access policies | ||||
| Endpoint posture & continuous verification | ||||
| Support | ||||
| Support level | Priority Email | SLA & Dedicated | ||
FAQ
Frequently asked questions
Solo is a single-user organisation at $9/month — ideal for individuals managing their own servers.
Team ($19/user/month) and Business ($29/user/month) are multi-user organisations billed per seat — add as many team members as you need.
Enterprise uses custom pricing for large-scale deployments with dedicated support and compliance.
For example, a team of 10 on the Team plan costs $190/month. Annual billing saves up to 24% (Team drops to $15/user/month, Business to $22/user/month).
All plans include a 14-day free trial.
No hidden fees — you only pay for the seats you use.
A user is any person with an active account who can authenticate and access resources
through PumaGate. Service accounts and API-only integrations do not count as users.
Deactivated users are not billed.
A resource is any target you want to provide access to: an SSH server,
database instance, web application, RDP host, Kubernetes cluster, gRPC service, or Telnet device. Each unique connection
target counts as one resource. For example, 5 SSH servers + 3 databases + 2 K8s clusters = 10 resources.
Solo includes SSH + Secure Network Access. Team adds RDP, VNC, database, and web app access. Business and Enterprise add Kubernetes, gRPC, and Telnet.
Each plan includes a resource allowance (Solo: 15, Team: 200, Business: unlimited, Enterprise: unlimited).
Start with full access to Business tier features for 14 days. No credit card required.
Connect your resources, invite your team, and experience Zero Trust access immediately.
At the end of the trial, choose the plan that fits your needs.
PumaGate offers the same Zero Trust access capabilities at a competitive price point.
Our Team plan starts at $19/user/month ($15 with annual billing) with per-seat pricing and
generous included limits. Our Business plan with full compliance
features is $29/user/month ($22 annually) with unlimited resources and API requests.
Enterprise uses custom pricing with dedicated support and full compliance.
Same security, same features, better price.
Solo includes Google login.
Team and above add full SAML 2.0 and OIDC support for enterprise
identity providers like Okta, Azure AD, OneLogin, Ping Identity, and others.
Session retention varies by plan: Solo includes 14 days (2 GB storage),
Team includes 30 days (100 GB), Business includes 90 days (500 GB),
and Enterprise includes up to 1 year (2 TB+).
PumaGate supports PostgreSQL, MySQL, MongoDB, Redis, Microsoft SQL Server, and
other common databases. Access is browser-based with full query logging.
Business tier adds data masking for sensitive columns.
Yes! Enterprise customers get a dedicated PumaGate instance fully managed by our team,
with isolated infrastructure for data residency and network isolation. Contact our
sales team to discuss dedicated deployment requirements.
Yes! PumaGate includes built-in Secure Network Access (powered by WireGuard) on every paid plan. Solo includes 1 peer per user, Team includes 5 peers per user, and Business/Enterprise include unlimited peers.
Unlike traditional VPNs, PumaGate's network access is identity-aware — every connection is authenticated, authorized, and logged.
Business adds split tunneling, custom DNS, traffic metadata logging, and exit nodes. Enterprise also includes dedicated IPs and compliance-grade controls.
For protocols like SSH, RDP, VNC, Kubernetes, Telnet, databases, and web apps, users can also connect directly through the browser when supported.
SSH, RDP, VNC, Kubernetes, gRPC, Telnet, databases, web apps & network access — all in one gateway.
Solo starts with SSH + Secure Network Access, Team adds core protocols, and Business unlocks all nine protocols including Kubernetes, gRPC, and Telnet. Start with the full Business tier free for 14 days — no sales call required. No credit card required.
Built to SOC 2 standards • 14-day free trial • No credit card required