# ZeroTier Pricing Prices in USD, billed monthly. Effective 4 August 2026. From personal use to enterprise scale — 10 devices or 10,000. ## At a glance | | Personal | Essential | Scale | Enterprise | Quantum | |---|---|---|---|---|---| | Monthly base price | Free | $18 | $179 | Custom | Custom | | Included devices | 10 | 10 | 100 | Custom | Custom | | Additional devices | Not available | $2.00 / device / mo. | $1.80 / device / mo. | Custom | Custom | | Networks | 1 | 10 | Unlimited | Unlimited | Unlimited | | Network admins | 1 | 5 | 10 | Unlimited | Unlimited | | API access | No | Yes | Yes | Yes | Yes | | Custom flow rules | No | No | Yes | Yes | No | | Air-gapped deployment | No | No | No | Available | Available | | FIPS 140-3 validated cryptography | No | No | No | One SKU | One SKU | | Post-quantum cryptography (CNSA 2.0-aligned) | No | No | No | No | Yes | | Support | Community | Ticketed | Ticketed | Priority | Priority | | | [Get started](https://central.zerotier.com/) | [Start free](https://central.zerotier.com/) | [Start free](https://central.zerotier.com/) | [Talk to sales](https://www.zerotier.com/connect-with-us/) | [Talk to sales](https://www.zerotier.com/connect-with-us/) | Full per-plan detail follows. Items marked **(roadmap)** are not yet available. --- ## Personal — Free Personal-use licence. For hobbyists, smart home, gaming, and evaluation. **Limits.** 10 devices, no additional devices available. 1 network. 1 network admin. **Deployment.** SaaS cloud, sovereign. **Platform.** OIDC SSO. Admin social sign-in. Netconf support. Local logging. Hardware acceleration available. Low memory footprint. Not included: local DNS, access control, service accounts, audit logs, Teams support, memory safety, embedded processor support, HSM support. **Interfaces.** CLI, web UI, webhooks. No API. No AI agent. **Networking.** ZTNVP protocol. Policy engine with local enforcement and centralized management. Any topology. Virtual Layer 2 and Layer 3. Multipathing, fast failover, multihoming. Low bandwidth mode. Fragmentation support. Centralized control plane, distributed data plane. Not included: templated or custom flow rules, custom routes, offline network connectivity, network-specific relays, telemetry. **Security.** AES-256 symmetric encryption. ECC-256 key exchange. Metadata privacy. Platform-level protection against single- and double-key-compromise MitM and D/DoS. **Compliance.** Covered by ZeroTier's SOC 2 Type II report and GDPR commitments. No FIPS-validated cryptography on this tier. **Support.** Community support. Documentation. --- ## Essential — $18 / month Business licence, self-service. For small and medium businesses replacing a VPN or running a small SD-WAN deployment. **Limits.** 10 devices included, $2.00 per additional device per month. 10 networks. 5 network admins. **Deployment.** SaaS cloud, sovereign. **Platform.** Everything in Personal, plus basic local DNS, basic access control, service accounts, 30-day audit logs. Not included: Teams support, memory safety, embedded processor support, HSM support. **Interfaces.** API, CLI, web UI, AI agent, webhooks. **Networking.** Everything in Personal, plus templated flow rules and custom routes. Not included: custom flow rules, offline network connectivity, network-specific relays, telemetry. **Security.** As Personal. **Compliance.** Covered by ZeroTier's SOC 2 Type II report and GDPR commitments; Data Processing Addendum available. No FIPS-validated cryptography on this tier. **Support.** Ticketed support. Documentation. SLA available. --- ## Scale — $179 / month Business licence, self-service. For large SD-WAN deployments, deeper technology stacks, and service providers managing complex networks. **Limits.** 100 devices included, $1.80 per additional device per month. Unlimited networks. 10 network admins. **Deployment.** SaaS cloud, sovereign. **Platform.** As Essential. **Interfaces.** API, CLI, web UI, AI agent, webhooks. **Networking.** Everything in Essential, plus custom flow rules. Not included: offline network connectivity, network-specific relays, telemetry. **Security.** As Personal. **Compliance.** Covered by ZeroTier's SOC 2 Type II report and GDPR commitments; Data Processing Addendum available. No FIPS-validated cryptography on this tier. **Support.** Ticketed support. Documentation. SLA available. --- ## Enterprise — Custom pricing Quoted, with commercial billing available. For organizations with 500+ devices, compliance requirements, or self-hosted deployment needs. **Limits.** Custom device count. Unlimited networks. Unlimited network admins. **Deployment.** SaaS cloud, sovereign, air-gapped available. **Platform.** Local DNS. Enhanced access control. Unlimited service accounts. 90-day audit logs. Teams support. Embedded processor support. HSM support available. Hardware acceleration available. **Interfaces.** API, CLI, web UI, AI agent, webhooks. **Networking.** Templated and custom flow rules. Custom routes. Offline network connectivity available. Network-specific relays. Virtual Layer 2 and Layer 3. Centralized control plane, distributed data plane. **Security.** AES-256 symmetric encryption. ECC-256 key exchange. Metadata privacy. Platform-level protection against single- and double-key-compromise MitM and D/DoS. **Compliance.** Covered by ZeroTier's SOC 2 Type II report and GDPR commitments; Data Processing Addendum available. FIPS 140-3 validated cryptography is available through the specific ZeroTier One SKU covered by Certificate #5424 — confirm scope with sales rather than assuming tier-wide coverage. **Support.** Priority support. Custom onboarding. Named account management. Security assessment available. Custom engineering available. Enhanced SLA. --- ## Quantum — Custom pricing Quoted, with commercial billing available. For organizations operating at the highest levels of security, sovereign deployments, or mission-critical infrastructure. Quantum runs a different protocol and a distributed control plane. It is not the standard platform with additional cryptography, and some standard platform features are not yet available on it — see the roadmap notes below. **Limits.** Custom device count. Unlimited networks. Unlimited network admins. **Deployment.** SaaS cloud, sovereign, air-gapped available. Sovereign network control available. **Platform.** Enhanced access control. Unlimited service accounts. Custom audit log retention. Teams support. Memory safety. Enhanced hardware acceleration. Lowest memory footprint. Embedded processor support. HSM support available. Roadmap: SSO, local DNS. Not included: admin social sign-in. **Interfaces.** API, CLI, AI agent, webhooks. Roadmap: web UI. **Networking.** ZTP protocol. Distributed policy management, configuration distribution, and control plane. Distributed data plane. Local policy enforcement. Offline network connectivity. Network-specific relays. Native low bandwidth mode. Custom routes. Multipathing, fast failover, multihoming. OpenTelemetry support. Virtual Layer 3. Roadmap: virtual Layer 2, programmable kernels, NGFW kernel template, IPS kernel template, agentic NetOps kernel template. Not included: templated or custom flow rules. **Security.** AES-256 symmetric encryption. ML-KEM-1024 / ECC-384 key exchange. pqNoise-based handshake. Enhanced metadata privacy. Protocol- and platform-level protection against single- and double-key-compromise MitM and D/DoS. Perfect forward secrecy. Quantum perfect secrecy. Identity, data, and ratchet forward secrecy. Online and offline identity keys. Cryptographic agility. Key rotation available. Silent by default. **Compliance and cryptographic standards.** Covered by ZeroTier's SOC 2 Type II report and GDPR commitments; Data Processing Addendum available. CNSA 2.0-aligned: implements the algorithm suite the NSA specifies for national security systems, including ML-KEM-1024 as standardized in FIPS 203. Alignment describes algorithm selection and architecture — it is not a CNSA 2.0 certification, which does not exist, and not an NSA approval, which additionally requires NIAP validation and CNSSP 15 configuration. FIPS 140-3 validated cryptography is available through the specific ZeroTier One SKU covered by Certificate #5424. **Support.** Priority support. Custom onboarding. Named account management. Security assessment available. Custom engineering available. Custom SLA. --- ## Compliance status ZeroTier maintains a SOC 2 Type II report and GDPR commitments, with a Data Processing Addendum available. FIPS 140-3 validated cryptography is available through one ZeroTier One SKU under Certificate #5424. ZeroTier Quantum is CNSA 2.0-aligned. CMMC Level 2 certification is in progress and not complete. CMMC certification applies to organizations rather than products, so no networking product can be CMMC-certified; ZeroTier provides capabilities that support a customer's own CMMC assessment. ZeroTier does not currently claim ISO 27001, DORA, Section 889, or FISMA status. ## In development ReBAC and premium relays are in development and not currently available on any tier. --- ## Flexible packaging MSPs, large IoT deployments, registered charities, and educational institutions qualify for alternative packaging, including up to 50% off for registered charities and educational organizations. [Talk to sales](https://www.zerotier.com/connect-with-us/) --- ## Notes Performance characteristics have been validated in controlled, comparable environments. Real-world deployments and environments may produce varying results. Metadata privacy on ZeroTier One requires version 1.16 or later and self-hosting for hello-pack encryption. [VERIFY: the source table gave round-trip time as 0.5 for Personal through Enterprise and 2 for Quantum, with no units or test conditions, and rated throughput, CPU, and memory efficiency as "Good," "Awesome," and "Market Leading." Those figures are omitted here pending units, methodology, and a decision on whether unquantified ratings should appear in a machine-readable document at all.] [VERIFY: the source table labelled CNSA 2.0 as "CSNA 2.0," and stated CNSA 2.0, FIPS 203, FIPS 204, FISMA, and Section 889 as compliance "Yes" values. Those have been rewritten as alignment and algorithm-implementation statements per NSA and NIST usage. Confirm the corrected language with legal, and fix at source.] [VERIFY: the source table listed sovereign deployment as available on the free Personal tier while sovereign network control is Quantum-only. Confirm both are correct and that they denote different capabilities.]