Business VPN and Zero-trust network access · US dollar pricing

Business VPN comparisons: every pairing we can price

Ten of the 24 vendors here publish a per-user price we can compute at ten users in the same currency, which makes exactly 29 head-to-head pairings. Every one of them has a page.

A pairing exists only where two vendors are in the same category and priced in the same currency, so the grid is split one table per category. Nothing here is set against a vendor from another category.

The grid names the cheaper side of each pairing and the gap per user per month at ten users. The vendors run cheapest first, so the cheaper side of any pairing is the one nearer the top of the table; where two of them publish the same figure at ten the cell says “Level” rather than naming a winner. The gap, not the winner, is what the grid is for: it is the difference between two published prices, before tax and before anything either vendor adds.

Every pairing, and the gap

Business VPN, US dollar pricing

The cheaper side of each pairing at ten users among the two Business VPN vendors priced in US dollar pricing, on each vendor's cheapest published plan. Row headings carry that vendor's own effective cost per user at ten. Every cell opens the full comparison, which shows both sides at two, five, ten, twenty-five, fifty and a hundred users. Names are shortened here; the full names, plans and sources are in the list below.
	Windscribe	Proton
Windscribe $5.00 at ten See Windscribe ScribeForce plans	—	Windscribe by $1.99
Proton $6.99 at ten See Proton VPN Business plans	Windscribe by $1.99	—

Scroll sideways on a phone.

Zero-trust network access, US dollar pricing

The cheaper side of each pairing at ten users among the eight Zero-trust network access vendors priced in US dollar pricing, on each vendor's cheapest published plan. Row headings carry that vendor's own effective cost per user at ten. Every cell opens the full comparison, which shows both sides at two, five, ten, twenty-five, fifty and a hundred users. Names are shortened here; the full names, plans and sources are in the list below.
	Firezone	Twingate	UTunnel	Cloudflare	GoodAccess	OpenVPN	NordLayer	Tailscale
Firezone $4.16 at ten See Firezone plans	—	Firezone by $0.84	Firezone by $2.34	Firezone by $2.84	Firezone by $2.84	Firezone by $2.84	Firezone by $3.84	Firezone by $3.84
Twingate $5.00 at ten See Twingate plans	Firezone by $0.84	—	Twingate by $1.50	Twingate by $2.00	Twingate by $2.00	Twingate by $2.00	Twingate by $3.00	Twingate by $3.00
UTunnel $6.50 at ten See UTunnel VPN plans	Firezone by $2.34	Twingate by $1.50	—	UTunnel by $0.50	UTunnel by $0.50	UTunnel by $0.50	UTunnel by $1.50	UTunnel by $1.50
Cloudflare $7.00 at ten See Cloudflare One plans	Firezone by $2.84	Twingate by $2.00	UTunnel by $0.50	—	Level both $7.00	Level both $7.00	Cloudflare by $1.00	Cloudflare by $1.00
GoodAccess $7.00 at ten See GoodAccess plans	Firezone by $2.84	Twingate by $2.00	UTunnel by $0.50	Level both $7.00	—	Level both $7.00	GoodAccess by $1.00	GoodAccess by $1.00
OpenVPN $7.00 at ten See OpenVPN CloudConnexa plans	Firezone by $2.84	Twingate by $2.00	UTunnel by $0.50	Level both $7.00	Level both $7.00	—	OpenVPN by $1.00	OpenVPN by $1.00
NordLayer $8.00 at ten See NordLayer business plans	Firezone by $3.84	Twingate by $3.00	UTunnel by $1.50	Cloudflare by $1.00	GoodAccess by $1.00	OpenVPN by $1.00	—	Level both $8.00
Tailscale $8.00 at ten See Tailscale plans	Firezone by $3.84	Twingate by $3.00	UTunnel by $1.50	Cloudflare by $1.00	GoodAccess by $1.00	OpenVPN by $1.00	Level both $8.00	—

Scroll sideways on a phone.

How that is worked out

users billed = max(users you have, minimum users the plan bills) user subtotal = published per-user price x users billed fixed charges = the mandatory gateway, server or base fee, where the plan requires one monthly total = user subtotal + fixed charges effective per user = monthly total / users you have uplift = effective per user / published per-user price three-year cost = monthly total x 36 + setup fee

Nothing else is added. Optional add-ons are shown in the tables and left out of every computed figure, and so are taxes, which none of these vendors publishes. Every figure here is a floor. The full method is at Method.

Where team size changes the answer

In five of the 29 pairings the cheaper side at two users is not the cheaper side at ten. A minimum user count or a fixed charge is doing it: both are paid in full by a small team and spread thin by a large one.

Cloudflare One and GoodAccess. At two users Cloudflare One is the cheaper side, $7.00 against $17.50 per user. At ten it is Cloudflare One, $7.00 against $7.00.
Cloudflare One and UTunnel VPN. At two users Cloudflare One is the cheaper side, $7.00 against $17.50 per user. At ten it is UTunnel VPN, $6.50 against $7.00.
OpenVPN CloudConnexa and UTunnel VPN. At two users OpenVPN CloudConnexa is the cheaper side, $7.00 against $17.50 per user. At ten it is UTunnel VPN, $6.50 against $7.00.
Tailscale and GoodAccess. At two users Tailscale is the cheaper side, $8.00 against $17.50 per user. At ten it is GoodAccess, $7.00 against $8.00.
Tailscale and UTunnel VPN. At two users Tailscale is the cheaper side, $8.00 against $17.50 per user. At ten it is UTunnel VPN, $6.50 against $8.00.

The ten compared here, and where the figures come from

Each line is the vendor's cheapest published plan at ten users — the plan every pairing above uses for that vendor. A different plan can win at a different team size, which is what the individual pages show.

Firezone — $4.16 per user at ten on Team, annual billing. Pricing page. checked 2026-09-07
Twingate — $5.00 per user at ten on Teams, annual billing. Pricing page. checked 2026-10-02
Windscribe ScribeForce — $5.00 per user at ten on ScribeForce, monthly billing. Pricing page. checked 2026-09-07
UTunnel VPN — $6.50 per user at ten on Basic (Access Gateway), monthly billing. Pricing page. checked 2026-09-08
Proton VPN Business — $6.99 per user at ten on VPN Essentials, annual billing. Pricing page. checked 2026-09-07
Cloudflare One — $7.00 per user at ten on Pay-as-you-go, annual billing. Pricing page. checked 2026-10-02
GoodAccess — $7.00 per user at ten on Essential, annual billing. Pricing page. checked 2026-09-07
OpenVPN CloudConnexa — $7.00 per user at ten on Essential, annual billing. Pricing page. checked 2026-09-07
NordLayer — $8.00 per user at ten on Lite, annual billing. Pricing page. checked 2026-10-02
Tailscale — $8.00 per user at ten on Standard, monthly billing. Pricing page. checked 2026-10-02

Why the other 14 vendors have no pairing

A comparison needs two published prices in the same currency that the same formula can run on. Where one is missing we say which one, rather than leaving the vendor out silently.

ExpressVPN for Teams (Business VPN) publishes only a “from” figure, which is a floor rather than a price, so the formula will not run on it. What it does publish.
PureVPN Business (Business VPN) publishes only a “from” figure, which is a floor rather than a price, so the formula will not run on it. What it does publish.
Surfshark Business (Business VPN) publishes only a “from” figure, which is a floor rather than a price, so the formula will not run on it. What it does publish.
VyprVPN Business (Business VPN) publishes a flat base fee rather than a rate per user. What it does publish.
Pritunl (Self-hosted and per-server) is billed per server, so a per-user figure would depend on how many people share the server rather than on the price list. What it does publish.
ZeroTier (Self-hosted and per-server) is billed per server, so a per-user figure would depend on how many people share the server rather than on the price list. What it does publish.
Appgate SDP (Zero-trust network access) asks you to contact sales, so there is no figure to compare. What it does publish.
Cato Networks (Zero-trust network access) asks you to contact sales, so there is no figure to compare. What it does publish.
Cisco Secure Access (Zero-trust network access) asks you to contact sales, so there is no figure to compare. What it does publish.
NetBird (Zero-trust network access) is the only vendor in its category priced in euros, and we do not convert currencies, so there is nothing to set it against. What it does publish.
Perimeter81 (Zero-trust network access) asks you to contact sales, so there is no figure to compare. What it does publish.
SonicWall Cloud Secure Edge (Zero-trust network access) asks you to contact sales, so there is no figure to compare. What it does publish.
Todyl (Zero-trust network access) asks you to contact sales, so there is no figure to compare. What it does publish.
Zscaler (Zero-trust network access) asks you to contact sales, so there is no figure to compare. What it does publish.

What these comparisons are not

Every pairing here compares published prices and nothing else. It is not a judgment about security, throughput, support or how either product works, and we have not used any of them. Neither figure is an invoice either: taxes are not included and none of these vendors publishes what it will add.

Written by Kaz (pen name). Figures are copied from providers' published pricing pages on the dates shown. We have not used these products. Corrections: contact form.