Compare plans and pricing
Free
Unlimited hosts
$0
/ host/ month
Premium
Unlimited baselines
$7.00
/ host/ month
Custom
For teams with extremely large deployments.
All features
For security engineers
For IT admins
Support |
Free | Premium |
| Public issue tracker (GitHub) |  |
|
| Community Slack channel | |
|
| Unlimited email support (confidential) | |
|
| Phone and video call support | |
Deployment |
||
GitOps |
|
|
| Self-managed |
|
|
| Deployment tools (Terraform, Helm) | |
|
| Managed Cloud (700+ hosts) |
|
Integrations |
||
| REST API | |
|
| Webhooks | |
|
| Deep automations* |
|
|
| Free integrations (Tines, Snowflake, Terraform, Chronicle, Jira, Zendesk, etc) | |
|
| Trigger a workflow based on a failing policy | |
|
| Premium integrations (Puppet, Vanta, etc) |
|
Device management |
||
| Device health |
|
|
| Script execution |
|
|
| Remotely enforce OS settings | |
|
| User-initiated enrollment of macOS computers | |
|
| Low-level MDM commands for macOS, iOS/iPadOS*, and Windows (e.g. remote restart) | |
|
| Native macOS update reminders |
|
|
| Custom device data for help desk | |
|
| Interactive MDM migration | |
|
| Self service |
|
|
| Zero-touch setup for macOS, iOS/iPadOS*, and Windows | |
|
| Enforce OS updates | |
|
| Cross-platform remote lock and wipe | |
|
| Deploy security agents on macOS, Windows, and Linux computers.* |
|
|
| Deploy and update apps on macOS, Windows, and Linux computers.* |
|
|
| Self-service portal for users to install apps* |
|
|
| License apps on macOS and iOS/iPadOS through Volume Purchasing Program (VPP).* |
|
|
| Puppet module | |
|
| Disk encryption |
|
|
| Audit log of Fleet activity (queries, scripts, logins, etc) | |
|
| Automated user role sync via Okta, AD, or any IDP | |
Endpoint operations |
||
| Device health |
|
|
| Automatic posture assessment |
|
|
| Human-endpoint mapping |
|
|
| Intrusion detection |
|
|
| File integrity monitoring (FIM) |
|
|
| Malware detection (YARA/custom IoCs) |
|
|
| Detection engineering | |
|
| Threat hunting | |
|
| Incident response |
|
|
| Binary authorization* | |
|
| Agent auto-update | |
|
| Installers (self-service) | |
|
| Batch installation (Chef, Ansible, Puppet, MDM) | |
|
| Remote settings |
|
|
| Command line tool (CLI) | |
|
| Software inventory | |
|
| Hardware inventory | |
|
| Device inventory dashboard | |
|
| Browse installed software packages | |
|
| Search devices by IP, serial, hostname, UUID | |
|
| Labels (SQL-driven) | |
|
| Versionable queries and config (GitOps) | |
|
| Scope transparency | |
|
| Single sign on (SSO, SAML) | |
|
| Grant API-only access | |
|
| Query performance monitoring | |
|
| Detect and surface issues with devices (policies) | |
|
| Flexible log destinations (AWS Kinesis, Lambda, GCP, Kafka) | |
|
| File carving (AWS S3) | |
|
| Maintenance windows |
|
|
| Variable enrollment |
|
|
| Private update registry |
|
|
| Variable agent versions | |
|
| Custom tables |
|
|
| Baselines (device groups) |
|
|
| Generate reports for groups of devices | |
|
| Audit log of Fleet activity (queries, scripts, logins, etc) | |
|
| Just-in-time (JIT) provisioning | |
|
| Role-based access control | |
|
| Policy scoring | |
Vulnerability management |
||
| Malware detection (YARA/custom IoCs) |
|
|
| Risk-based vulnerability management | |
|
| Vulnerability dashboard | |
|
| Vulnerability scores (EPSS and CVSS) | |
|
| CISA KEVs (known exploited vulnerabilities) | |
|
| Asset discovery* | |
* Coming soon
{{category.categoryName}}
{{feature.name}}{{feature.comingSoon ? '*' : ''}}
Free
Premium
* Coming soon
Device management |
Free | Premium |
| Device health |
|
|
| Script execution |
|
|
| Remotely enforce OS settings | |
|
| User-initiated enrollment of macOS computers | |
|
| Low-level MDM commands for macOS, iOS/iPadOS*, and Windows (e.g. remote restart) | |
|
| Native macOS update reminders |
|
|
| Custom device data for help desk | |
|
| Interactive MDM migration | |
|
| Self service |
|
|
| Zero-touch setup for macOS, iOS/iPadOS*, and Windows | |
|
| Enforce OS updates | |
|
| Cross-platform remote lock and wipe | |
|
| Deploy security agents on macOS, Windows, and Linux computers.* |
|
|
| Deploy and update apps on macOS, Windows, and Linux computers.* |
|
|
| Self-service portal for users to install apps* |
|
|
| License apps on macOS and iOS/iPadOS through Volume Purchasing Program (VPP).* |
|
|
| Puppet module | |
|
| Disk encryption |
|
|
| Audit log of Fleet activity (queries, scripts, logins, etc) | |
|
| Automated user role sync via Okta, AD, or any IDP | |
Support |
||
| Public issue tracker (GitHub) | |
|
| Community Slack channel | |
|
| Unlimited email support (confidential) | |
|
| Phone and video call support | |
Deployment |
||
| GitOps |
|
|
| Self-managed |
|
|
| Deployment tools (Terraform, Helm) | |
|
| Managed Cloud (700+ hosts) |
|
Integrations |
||
| REST API | |
|
| Webhooks | |
|
| Deep automations* |
|
|
| Free integrations (Tines, Snowflake, Terraform, Chronicle, Jira, Zendesk, etc) | |
|
| Trigger a workflow based on a failing policy | |
|
| Premium integrations (Puppet, Vanta, etc) |
|
Endpoint operations |
||
| Device health |
|
|
| Automatic posture assessment |
|
|
| Human-endpoint mapping |
|
|
| Intrusion detection |
|
|
| File integrity monitoring (FIM) |
|
|
| Malware detection (YARA/custom IoCs) |
|
|
| Detection engineering | |
|
| Threat hunting | |
|
| Incident response |
|
|
| Binary authorization* | |
|
| Agent auto-update | |
|
| Installers (self-service) | |
|
| Batch installation (Chef, Ansible, Puppet, MDM) | |
|
| Remote settings |
|
|
| Command line tool (CLI) | |
|
| Software inventory | |
|
| Hardware inventory | |
|
| Device inventory dashboard | |
|
| Browse installed software packages | |
|
| Search devices by IP, serial, hostname, UUID | |
|
| Labels (SQL-driven) | |
|
| Versionable queries and config (GitOps) | |
|
| Scope transparency | |
|
| Single sign on (SSO, SAML) | |
|
| Grant API-only access | |
|
| Query performance monitoring | |
|
| Detect and surface issues with devices (policies) | |
|
| Flexible log destinations (AWS Kinesis, Lambda, GCP, Kafka) | |
|
| File carving (AWS S3) | |
|
| Maintenance windows |
|
|
| Variable enrollment |
|
|
| Private update registry |
|
|
| Variable agent versions | |
|
| Custom tables |
|
|
| Baselines (device groups) |
|
|
| Generate reports for groups of devices | |
|
| Audit log of Fleet activity (queries, scripts, logins, etc) | |
|
| Just-in-time (JIT) provisioning | |
|
| Role-based access control | |
|
| Policy scoring | |
* Coming soon
{{category.categoryName}}
{{feature.name}}{{feature.comingSoon ? '*' : ''}}
Free
Premium
* Coming soon
Support |
Free | Premium |
| Public issue tracker (GitHub) | |
|
| Community Slack channel | |
|
| Unlimited email support (confidential) | |
|
| Phone and video call support | |
Deployment |
||
| GitOps |
|
|
| Self-managed |
|
|
| Deployment tools (Terraform, Helm) | |
|
| Managed Cloud (700+ hosts) |
|
Integrations |
||
| REST API | |
|
| Webhooks | |
|
| Deep automations* |
|
|
| Free integrations (Tines, Snowflake, Terraform, Chronicle, Jira, Zendesk, etc) | |
|
| Trigger a workflow based on a failing policy | |
|
| Premium integrations (Puppet, Vanta, etc) |
|
Endpoint operations |
||
| Device health |
|
|
| Automatic posture assessment |
|
|
| Human-endpoint mapping |
|
|
| Intrusion detection |
|
|
| File integrity monitoring (FIM) |
|
|
| Malware detection (YARA/custom IoCs) |
|
|
| Detection engineering | |
|
| Threat hunting | |
|
| Incident response |
|
|
| Binary authorization* | |
|
| Agent auto-update | |
|
| Installers (self-service) | |
|
| Batch installation (Chef, Ansible, Puppet, MDM) | |
|
| Remote settings |
|
|
| Command line tool (CLI) | |
|
| Software inventory | |
|
| Hardware inventory | |
|
| Device inventory dashboard | |
|
| Browse installed software packages | |
|
| Search devices by IP, serial, hostname, UUID | |
|
| Labels (SQL-driven) | |
|
| Versionable queries and config (GitOps) | |
|
| Scope transparency | |
|
| Single sign on (SSO, SAML) | |
|
| Grant API-only access | |
|
| Query performance monitoring | |
|
| Detect and surface issues with devices (policies) | |
|
| Flexible log destinations (AWS Kinesis, Lambda, GCP, Kafka) | |
|
| File carving (AWS S3) | |
|
| Maintenance windows |
|
|
| Variable enrollment |
|
|
| Private update registry |
|
|
| Variable agent versions | |
|
| Custom tables |
|
|
| Baselines (device groups) |
|
|
| Generate reports for groups of devices | |
|
| Audit log of Fleet activity (queries, scripts, logins, etc) | |
|
| Just-in-time (JIT) provisioning | |
|
| Role-based access control | |
|
| Policy scoring | |
Vulnerability management |
||
| Malware detection (YARA/custom IoCs) |
|
|
| Risk-based vulnerability management | |
|
| Vulnerability dashboard | |
|
| Vulnerability scores (EPSS and CVSS) | |
|
| CISA KEVs (known exploited vulnerabilities) | |
|
| Asset discovery* | |
* Coming soon
{{category.categoryName}}
{{feature.name}}{{feature.comingSoon ? '*' : ''}}
Free
Premium
* Coming soon
Questions?
We have answers to the most commonly asked questions.
{{selectedFeature.description}}
Learn more
SOC2 Type 2 certified
