Per-user pricing, published before launch.
Bastyx will be priced per active user per month. Final prices aren’t set yet, and when they are, they’ll be on this page rather than behind a sales call.
Proposed packaging. All capabilities are planned and may move between tiers before launch.
Starter
Typically 20–100 peopleFor startups getting access under control.
Per active user / month
Price published before general availability
- Passwordless sign-in with passkeys, security keys and biometrics
- Device enrollment for Windows and Linux workstations
- SSH access without long-lived keys
- One-step onboarding and offboarding
- Audit log of authentication and admin events
Growth
Typically 100–500 peopleFor engineering orgs with production to protect.
Per active user / month
Price published before general availability
- Everything in Starter
- Role, team and resource-tag policies
- Temporary and elevated access with approvals
- Risk-based step-up authentication
- Identity provider directory sync
- Event export to your logging stack
Enterprise
Customer-hosted optionFor teams that need control over where Bastyx runs.
Per active user / month
Price published before general availability
- Everything in Growth
- Customer-hosted control plane
- Custom data retention
- Architecture and security review with our engineers
- Dedicated support channel
Compare plans
What each tier is planned to include.
| Starter | Growth | Enterprise | |
|---|---|---|---|
| Passkeys, security keys and device biometrics | Yes | Yes | Yes |
| Windows and Linux workstation login | Yes | Yes | Yes |
| SSH access | Yes | Yes | Yes |
| Onboarding and offboarding | Yes | Yes | Yes |
| Audit log | Yes | Yes | Yes |
| Policy scopes | Team | Team, role, resource tag | Team, role, resource tag |
| Temporary and elevated access | No | Yes | Yes |
| Risk-based step-up | No | Yes | Yes |
| Identity provider sync | No | Yes | Yes |
| Event export | No | Yes | Yes |
| Deployment | Bastyx Cloud | Bastyx Cloud | Cloud or customer-hosted |
| Data retention | Standard | Standard | Custom |
Passkeys, security keys and device biometrics
- Starter
- Yes
- Growth
- Yes
- Enterprise
- Yes
Windows and Linux workstation login
- Starter
- Yes
- Growth
- Yes
- Enterprise
- Yes
SSH access
- Starter
- Yes
- Growth
- Yes
- Enterprise
- Yes
Onboarding and offboarding
- Starter
- Yes
- Growth
- Yes
- Enterprise
- Yes
Audit log
- Starter
- Yes
- Growth
- Yes
- Enterprise
- Yes
Policy scopes
- Starter
- Team
- Growth
- Team, role, resource tag
- Enterprise
- Team, role, resource tag
Temporary and elevated access
- Starter
- No
- Growth
- Yes
- Enterprise
- Yes
Risk-based step-up
- Starter
- No
- Growth
- Yes
- Enterprise
- Yes
Identity provider sync
- Starter
- No
- Growth
- Yes
- Enterprise
- Yes
Event export
- Starter
- No
- Growth
- Yes
- Enterprise
- Yes
Deployment
- Starter
- Bastyx Cloud
- Growth
- Bastyx Cloud
- Enterprise
- Cloud or customer-hosted
Data retention
- Starter
- Standard
- Growth
- Standard
- Enterprise
- Custom
Hardware
Bring your own keys.
Bastyx is designed around open standards, so the FIDO2 security keys and built-in fingerprint sensors your team already uses should work without buying anything from us.
Hardware is always optional and priced separately from software. We’re exploring a compact USB-C fingerprint reader for machines without a built-in sensor; if it ships, it will be listed here with its price.
FAQ
Pricing questions
Why aren’t prices listed yet?
Bastyx is in early access and final packaging depends on what early-access teams need. We’d rather publish a price we can keep than a placeholder we’d have to change. Prices will be on this page before general availability.
What counts as an active user?
The planned definition is anyone who authenticates through Bastyx at least once in a billing month. People you’ve offboarded, and people who didn’t sign in that month, wouldn’t count.
Do contractors count as users?
Under the planned model, yes, in the months they actively use Bastyx. Temporary access for a contractor who only works one month counts for that month only.
Will there be a free tier?
We haven’t decided. If we offer one, it will be listed here with its limits spelled out.
Do we have to buy hardware?
No. Bastyx is designed to work with standard FIDO2 security keys and the biometric sensors your laptops already have. Hardware we offer, such as the optional USB-C fingerprint reader we’re exploring, would be priced separately.
How does customer-hosted pricing work?
It’s planned as per-active-user pricing plus a deployment component that reflects support for running in your environment. We’ll publish the structure alongside the other tiers.
Help shape the pricing.
Early-access terms are agreed individually with each team. Tell us your size and what you’re securing.