Pricing

Flat per-firewall pricing. No per-GB tax.

One price, per firewall, on a VM you provision. No per-hour endpoint charge, no per-GB data-processing tax, no per-rule tiers — just a flat monthly licence in GBP.

£179/month per firewall — volume pricing reduces the per-firewall rate as your fleet grows.

Pricing currency

GBP USD EUR

Start free Estimate your savings

Freemium

A genuine starting point — one firewall, no card.

Free 1 firewall · owner-only (1 user)

Start free

1 firewall (NVA) in your own network
L3/L4 egress & east/west control
Owner-only — 1 user
Real-time live log streaming

Not in Freemium

FQDN/SNI-based L7 — SNI / FQDN filtering
Compliance frameworks
Log-export sinks to your SIEM
Metrics, history & audit log
Multi-stream live logs

Trial

14 days of the full feature set, with 1-of-each working caps.

14 days Full features · no card to start

Start a trial

The full feature set, for 14 days
FQDN/SNI-based L7 — SNI / FQDN filtering, no TLS decryption
1 compliance set
1 log-export sink to your own SIEM
Metrics, history, audit log & multi-stream live logs
Cloud-object imports — AWS IP ranges, Azure Service Tags
1 policy · 2 users (owner + 1 invited)

Recommended

Licensed

Unlimited everything, on a flat per-firewall licence.

£179 /mo per firewall Per-firewall price reduces as your fleet grows

Start free

Unlimited firewalls, policies, network objects & users
FQDN/SNI-based L7 — SNI / FQDN filtering, no TLS decryption
All 25 compliance frameworks — advise or enforce
Unlimited log-export sinks to your own SIEM
Metrics, history, audit log & multi-stream live logs
Cloud-object imports — AWS IP ranges, Azure Service Tags
One pane of glass across the whole fleet

What's never on the bill

No per-GB data-processing tax
No per-hour endpoint fee
No per-rule or per-feature charge

Prices per firewall, per month, in your chosen currency (GBP, USD or EUR) — each a real, billable price, reducing at volume. You also pay for the Linux VM(s) you run it on — you choose how many and what size to meet your availability and throughput needs, so the compute cost stays predictable and in your control. A cloud-native firewall's NAT and inspection endpoints carry their own compute cost too.

No per-GB data-processing tax

Cloud-native firewalls — AWS Network Firewall, Azure Firewall, Google Cloud NGFW — charge for every GB they inspect. That meter never stops. Enforza is $0/GB.
No per-hour endpoint fee

The managed firewall bills a per-hour endpoint rate before a single byte flows — on AWS a 2-AZ deployment is roughly $404/month up front (primary AZ at $0.395/hr, each additional AZ at a lower $0.158/hr), and on Azure the Standard tier floors at $912.50/month with no per-AZ discount at all. Enforza is a flat per-firewall licence on a VM you provision.
No second meter for NAT

On GCP, filtered egress means stacking Cloud NGFW and a separate Cloud NAT line — two per-GB meters. Enforza does secure NAT and FQDN/SNI-based L7 in one appliance, with no separate NAT charge on any cloud.

No limits, no asterisks

Nothing about your firewall moves the line — not its size, its address space, or how much it protects.

Not CPU or instance-size limited Run the firewall on any VM size — a small instance or a large one — and the price is unchanged. Mega-NGFW VMs and cloud-native firewalls meter by vCPU, instance size or endpoint-hour. Enforza does not.
Not IP or object limited No cap on the protected IPs or network objects on the Licensed plan, and no per-IP charge. Size your address space and object library to your network, not to a price tier.
Not protected-device limited We don't licence by the number of devices or hosts your firewall protects. Why charge by how many things sit behind it? One flat licence per firewall, however much it guards.
Not complicated metered pricing One flat line per firewall — predictable, like buying a box. Not the per-hour plus per-GB plus per-AZ plus per-add-on maze you reconcile at the end of every month.

Cloud-native firewall rates are directional and dated 2026-06-14; AWS NAT Gateway and Network Firewall are separate products with separate per-GB rates. Run your own numbers in the calculator.

Estimate your savings See the full comparison

Basic support
Included Part of every plan

Email support, in the base price of every plan — Free, Trial and Licensed. No add-on, no separate line.
Premium support
Available Paid add-on

Faster response and priority handling for teams that need it. Available as an add-on — talk to us about the right level for your fleet.
Hourly consultancy
Available Paid, by the hour

Hands-on help with design, migration off a cloud-native firewall, or compliance roll-out — billed by the hour. Book a call to scope it.

Talk to us about support Book a demo

What counts as a firewall?

A firewall is a single Enforza NVA — one lightweight Linux VM in your own cloud network, on AWS, Azure, Google Cloud or on-prem. You are billed per firewall, flat, per month — the price doesn't change with how much traffic it processes, how many rules it runs, or which features you switch on.

Is it really flat — no per-GB charge?

Yes. Enforza is a flat per-firewall subscription from £179/month per firewall, reducing at volume — no per-GB data-processing tax, no per-hour endpoint fee, no per-rule or per-feature charge. The only other cost is the Linux VM you run it on, which a cloud-native firewall's NAT and inspection endpoints also require.

How does the volume pricing work?

The more firewalls you run, the less each one costs — a flat per-firewall rate at each volume tier, with no contract minimum. The headline figure is the standard unit price; larger fleets move to the reduced tier automatically.

Which currencies can I pay in?

Enforza is billed in pounds sterling (GBP), US dollars (USD) or euros (EUR). Each currency has its own real, billable price — the figure you select on this page is the price you pay, not a converted estimate. Use the currency switcher to see the price in your currency.

What is included in the Freemium tier?

Freemium is a genuine self-serve tier, not a teaser: one firewall in your own network with L3/L4 egress and east/west control and an owner-only single user — no card required. The paid features — FQDN/SNI-based L7 filtering, compliance frameworks, log export to your SIEM, metrics and multi-stream live logs — are not in Freemium; they unlock on the 14-day Trial and the Licensed plan.

How does the trial work?

The Trial gives you the full feature set for 14 days — FQDN/SNI-based L7 filtering, one compliance set, one log-export sink to your own SIEM, metrics, audit log and multi-stream live logs — with single-of-each working caps (1 policy, 1 sink, 1 compliance set, 2 users). It is the way to evaluate everything Enforza does before moving to the Licensed plan.

Can I scale down — or up?

Yes. Billing is flat per firewall with no contract minimum, so you pay only for the firewalls you run: add them as you grow (and the per-firewall price reduces with volume), or retire them and the bill comes down. No per-GB or per-rule meter to reconcile.

Available on AWS & Azure Marketplaces

Prefer to deploy from the AWS or Azure Marketplace?

Both listings are bring-your-own-licence — the software is free through the marketplace; you pay only for the VM it runs on. Your Enforza plan (including the free tier) stays flat and per-firewall in the console, whichever cloud you land on.

Flat, per firewall. No surprises.

One price. No per-GB tax.

From £179/month per firewall, with volume pricing that reduces the rate as your fleet grows — flat, with no per-GB data-processing tax and no per-hour endpoint fee. Start free, no card.

Start free See your savings

Flat per-firewall pricing. No per-GB tax.

Start free. Trial the lot. Pay flat.

Freemium

Trial

Licensed

What you don't pay for.

No per-GB data-processing tax

No per-hour endpoint fee

No second meter for NAT

No limits, no asterisks

Support that's in the price — and more when you want it.

Basic support

Premium support

Hourly consultancy

Pricing questions

Prefer to deploy from the AWS or Azure Marketplace?

One price. No per-GB tax.

Freemium — next steps

Trial — next steps

Licensed — next steps