Zero-trust network access · published prices only
ZTNA pricing: what zero-trust network access costs per user
What zero-trust network access actually costs per person per month, from the published pricing pages of the 16 ZTNA vendors in this dataset — including the ones that publish no price, and the minimum user counts and fixed charges that decide the answer.
Quick answer. Of the 16 zero-trust vendors here, eight publish a price we could read. Their 14 paid per-user plans in US dollars work out at between $4.16 and $18.00 per person per month for a team of 10, with a middle figure of $8.00. The cheapest is Firezone Team at $4.16 on annual billing; the most expensive is Tailscale Premium at $18.00.
The other eight are the reason a single “ZTNA price” does not exist: seven ask you to contact sales and print no figure at all, and one publishes a page whose figures we could not read. Those vendors are named below rather than estimated.
Every zero-trust plan a team of 10 can buy, in price order
| Vendor and plan | Published per user | Min users | Fixed charge | Effective / user at 10 | Above published | 3-year cost for 10 |
|---|---|---|---|---|---|---|
| Firezone Team | $4.16 | — | — | $4.16 | 1.0x | $1,498 |
| Twingate Teams | $4.25 | — | — | $4.25 | 1.0x | $1,530 |
| UTunnel VPN Basic (Access Gateway) | $6.00 | 5 | — | $6.00 | 1.0x | $2,160 |
| GoodAccess Essential | $7.00 | 5 | $49.00 optional | $7.00 | 1.0x | $2,520 |
| OpenVPN CloudConnexa Essential | $7.00 | — | — | $7.00 | 1.0x | $2,520 |
| NordLayer Lite | $8.00 | 5 | — | $8.00 | 1.0x | $2,880 |
| Tailscale Standard | $8.00 | — | — | $8.00 | 1.0x | $2,880 |
| UTunnel VPN Standard (Access Gateway) | $8.00 | 5 | — | $8.00 | 1.0x | $2,880 |
| Twingate Business | $8.50 | — | — | $8.50 | 1.0x | $3,060 |
| OpenVPN CloudConnexa Premium | $9.50 | — | — | $9.50 | 1.0x | $3,420 |
| GoodAccess Premium | $11.00 | 5 | $49.00 optional | $11.00 | 1.0x | $3,960 |
| NordLayer Core | $11.00 | 5 | $40.00 required | $15.00 | 1.4x | $5,400 |
| NordLayer Premium | $14.00 | 5 | $40.00 required | $18.00 | 1.3x | $6,480 |
| Tailscale Premium | $18.00 | — | — | $18.00 | 1.0x | $6,480 |
Scroll sideways on a phone.
Euro pricing
Ranked separately. We do not convert currencies, so these plans are not comparable with the table above.
| Vendor and plan | Published per user | Min users | Fixed charge | Effective / user at 10 | Above published | 3-year cost for 10 |
|---|---|---|---|---|---|---|
| NetBird Team | €6.00 | — | — | €6.00 | 1.0x | €2,160 |
| NetBird Business | €12.00 | — | — | €12.00 | 1.0x | €4,320 |
Scroll sideways on a phone.
How that is worked out
Nothing else is added. Optional add-ons are shown in the tables and left out of every computed figure, and so are taxes, which none of these vendors publishes. Every figure here is a floor. The full method is at Method.
The zero-trust vendors that publish no price
Seven of the 16 vendors in this category ask you to contact sales. None of them is in any table above, and we do not estimate what they charge.
- Appgate SDP asks you to contact sales for every tier we could find. checked 2026-08-21
- Cato Networks asks you to contact sales for every tier we could find. checked 2026-08-21
- Cisco Secure Access asks you to contact sales for every tier we could find. checked 2026-08-21
- Cloudflare One asks you to contact sales for every tier we could find. checked 2026-08-21
- SonicWall Cloud Secure Edge asks you to contact sales for every tier we could find. checked 2026-08-21
- Todyl asks you to contact sales for every tier we could find. checked 2026-08-21
- Zscaler asks you to contact sales for every tier we could find. checked 2026-08-21
Separately, these publish figures we could not read. That is our limitation, not a refusal by the vendor, and it is kept apart from “contact sales” on purpose.
- Perimeter81 draws its prices with scripts that did not run when we retrieved the page. checked 2026-08-21
The split matters when you are budgeting: a published price can be checked against this page tomorrow, a quoted one cannot. The vendors that publish nothing works through what that does to a shortlist.
Minimum user counts
Seven zero-trust plans, from GoodAccess, NordLayer and UTunnel VPN, bill a minimum number of users. Every one of those minimums is 5 users, so at 10 people the minimum changes nothing: the team is already above the line. Below it they are the most expensive plans on this page per person, and the pricing pages do not say so.
| Vendor and plan | Minimum users billed | Published per user | Per person at 10 | Per person at 2 | Times published at 2 |
|---|---|---|---|---|---|
| GoodAccess Essential | 5 | $7.00 | $7.00 | $17.50 | 2.5x |
| GoodAccess Premium | 5 | $11.00 | $11.00 | $27.50 | 2.5x |
| NordLayer Core | 5 | $11.00 | $15.00 | $47.50 | 4.3x |
| NordLayer Lite | 5 | $8.00 | $8.00 | $20.00 | 2.5x |
| NordLayer Premium | 5 | $14.00 | $18.00 | $55.00 | 3.9x |
| UTunnel VPN Basic (Access Gateway) | 5 | $6.00 | $6.00 | $15.00 | 2.5x |
| UTunnel VPN Standard (Access Gateway) | 5 | $8.00 | $8.00 | $20.00 | 2.5x |
Scroll sideways on a phone.
The five-user page sits exactly on that line, and why the smallest teams pay the most per person works through the arithmetic.
Charges that are not per user
- GoodAccess Essential: $49.00 a month for Dedicated gateway (per dedicated gateway, optional add-on), which the vendor lists as optional, so it is shown in the tables and left out of every computed figure here.
- GoodAccess Premium: $49.00 a month for Dedicated gateway (per dedicated gateway, optional add-on), which the vendor lists as optional, so it is shown in the tables and left out of every computed figure here.
- GoodAccess Enterprise: $49.00 a month for Dedicated gateway (per dedicated gateway, optional add-on), which the vendor lists as optional, so it is shown in the tables and left out of every computed figure here.
- NordLayer Core: $40.00 a month for Server with Dedicated IP (one per network), which the vendor states is required. At 10 users that is $4.00 per person on top of the published $11.00, a total of $15.00 each.
- NordLayer Premium: $40.00 a month for Server with Dedicated IP (one per network), which the vendor states is required. At 10 users that is $4.00 per person on top of the published $14.00, a total of $18.00 each.
Two of those five are required and three optional. A charge like this is the one line on the bill that does not scale, and it is what separates two zero-trust plans with the same headline price. What a dedicated IP or gateway costs per person takes every such charge on the site, required and optional, and runs it across team sizes.
Where zero-trust is free, and where it stops being free
- Firezone Starter: no charge up to 6 users.
- NetBird Free: no charge up to 5 users.
- OpenVPN CloudConnexa Starter: no charge up to 5 users.
- Tailscale Personal (Free): no charge up to 6 users.
Every free tier in this category stops at 5 or 6 users. A team above that number is buying from the table at the top of this page, which is why the free tiers do not appear in it.
Zero-trust and business VPN prices are not comparable, and this is why
The two are sold to the same buyer for the same job, and this site ranks them in one table because of that. But at a team of 10, 14 of the 15 paid per-user plans we can compute in US dollars are zero-trust products. The business VPN side is not cheaper or more expensive — it mostly does not publish a per-user rate at all.
- ExpressVPN for Teams publishes figures we could not read. checked 2026-08-21
- Proton VPN Business publishes figures we could not read. checked 2026-08-21
- PureVPN Business prices two plans as a “from” figure with volume tiers, which is a range, not a price. checked 2026-08-21
- Surfshark Business publishes figures we could not read. checked 2026-08-21
- VyprVPN Business prices four plans as a base fee that already covers 5 users, with no rate per person published for anyone beyond that. checked 2026-08-21
- Windscribe ScribeForce publishes one per-user price we can compute. checked 2026-08-21
So a sentence of the form “ZTNA costs more than a business VPN” cannot be checked against published prices, and this site will not print one. What can be checked is in the table above. Per user, per device, or per server covers the same problem for the self-hosted products.
What zero-trust costs at other team sizes
| Team size | Paid plans that fit | Lowest per user | Middle | Highest | Costing more than advertised |
|---|---|---|---|---|---|
| 2 users | 14 | $4.16 | $16.25 | $55.00 | 7 |
| 5 users | 14 | $4.16 | $8.00 | $22.00 | 2 |
| 10 users | 14 | $4.16 | $8.00 | $18.00 | 2 |
| 25 users | 14 | $4.16 | $8.00 | $18.00 | 2 |
| 50 users | 14 | $4.16 | $8.00 | $18.00 | 2 |
| 100 users | 12 | $4.16 | $8.25 | $18.00 | 2 |
The per-user prices themselves barely move. What moves is how far a minimum seat count and a required fixed charge are spread over the team. Open the calculator filtered to zero-trust to put your own number in.
Who this is not for
This is not a list of the best zero-trust products. It is every ZTNA plan we could compute from a published price, in price order. We have not used these products, we do not rate them, nothing here is a security assessment, and no position on this page is for sale.
Sources
- NetBird pricing page. checked 2026-08-21
- Appgate SDP pricing page. checked 2026-08-21
- Cato Networks pricing page. checked 2026-08-21
- Cisco Secure Access pricing page. checked 2026-08-21
- Cloudflare One pricing page. checked 2026-08-21
- Firezone pricing page. checked 2026-08-21
- GoodAccess pricing page. checked 2026-08-21
- NordLayer pricing page. checked 2026-08-21
- OpenVPN CloudConnexa pricing page. checked 2026-09-05
- Perimeter81 pricing page. checked 2026-08-21
- SonicWall Cloud Secure Edge pricing page. checked 2026-08-21
- Tailscale pricing page. checked 2026-08-21
- Todyl pricing page. checked 2026-08-21
- Twingate pricing page. checked 2026-08-21
- UTunnel VPN pricing page. checked 2026-08-21
- Zscaler pricing page. checked 2026-08-21
Related
- The calculator, filtered to zero-trust
- What a dedicated IP or gateway charge costs per person
- Zero-trust plans for teams of 10 to 24, in order
- What a team of 10 pays, across all categories
- Every vendor we hold
- The vendors that publish nothing
- How the ordering is produced
Written by Kaz (pen name). Figures are copied from providers' published pricing pages on the dates shown. We have not used these products. Corrections: contact form.