Pricing

Flat per-firewall pricing. No per-GB tax.

One price, per firewall, on a VM you already run. No per-hour endpoint charge, no per-GB data-processing tax, no per-rule tiers — just a flat monthly licence in GBP.

£179/month per firewall — volume pricing reduces the per-firewall rate as your fleet grows.

Pricing currency
Plans

Start free. Trial the lot. Pay flat.

Three tiers, one firewall NVA underneath. Free is a real entry tier; the 14-day Trial unlocks the full feature set; Licensed is unlimited everything on a flat per-firewall licence.

Free

A genuine starting point — one firewall, no card.

Free 1 firewall · owner-only (1 user)
Start free
  • 1 firewall (NVA) in your own network
  • L3/L4 egress control
  • Network objects (up to 10)
  • Owner-only — 1 user
Not in Free
  • Identity-aware L7 — SNI / FQDN filtering
  • Compliance frameworks
  • Log-export sinks to your SIEM
  • Metrics, history & audit log
  • Multi-stream live logs

Trial

14 days of the full feature set, with 1-of-each working caps.

14 days Full features · no card to start
Start a trial
  • The full feature set, for 14 days
  • Identity-aware L7 — SNI / FQDN filtering, no TLS decryption
  • 1 compliance set
  • 1 log-export sink to your own SIEM
  • Metrics, history, audit log & multi-stream live logs
  • Cloud-object imports — AWS IP ranges, Azure Service Tags
  • 1 policy · 2 users (owner + 1 invited)

Prices per firewall, per month, in your chosen currency (GBP, USD or EUR) — each a real, billable price. Volume pricing reduces the per-firewall rate as your fleet grows. Plus the Linux VM you run it on — your own cloud bill, which a cloud-native firewall's NAT and inspection endpoints also require. Flat, with no per-GB, per-hour or per-rule charge.

The wedge

What you don't pay for.

The cloud-native firewall's bill is built from meters that never stop. Enforza removes all of them — the price is flat and does not move with your traffic.

  • No per-GB data-processing tax

    Cloud-native firewalls — AWS Network Firewall, Azure Firewall, Google Cloud NGFW — charge for every GB they inspect. That meter never stops and grows with traffic. Enforza is $0/GB.

  • No per-hour endpoint fee

    The managed firewall and its NAT each bill a per-hour, per-AZ rate before a single byte flows. Enforza is a flat per-firewall licence on a VM you already run.

  • No second meter for NAT

    On AWS and GCP, filtered egress means stacking a managed firewall and a separate NAT gateway — two products, two per-GB meters. Enforza does secure NAT and identity-aware L7 in one appliance.

No limits, no asterisks

The flat price isn't just "no per-GB". Nothing about your firewall moves the line — not its size, its address space, or how much it protects.

  • Not CPU or instance-size limited Run the firewall on any VM size — a small instance or a large one — and the price is unchanged. Mega-NGFW VMs and cloud-native firewalls meter by vCPU, instance size or endpoint-hour. Enforza does not.
  • Not IP or object limited No cap on the protected IPs or network objects on the Licensed plan, and no per-IP charge. Size your address space and object library to your network, not to a price tier.
  • Not protected-device limited We don't licence by the number of devices or hosts your firewall protects. Why charge by how many things sit behind it? One flat licence per firewall, however much it guards.
  • Not complicated metered pricing One flat line per firewall — predictable, like buying a box. Not the per-hour plus per-GB plus per-AZ plus per-add-on maze you reconcile at the end of every month.

Cloud-native firewall rates are directional and dated 2026-06-14; AWS NAT Gateway and Network Firewall are separate products with separate per-GB rates. Run your own numbers in the calculator.

Support & services

Support that's in the price — and more when you want it.

Basic support is included in every plan, at no extra cost. Premium support and hourly consultancy are available as paid add-ons — talk to us and we'll scope the right level.

  • Basic support

    Included Part of every plan

    Email support is included in the base price of every plan — Free, Trial and Licensed. No add-on, no separate line.

  • Premium support

    Available Paid add-on

    Faster response and priority handling for teams that need it. Available as an add-on — talk to us about the right level for your fleet.

  • Hourly consultancy

    Available Paid, by the hour

    Hands-on help with design, migration off a cloud-native firewall, or compliance roll-out — billed by the hour. Book a call to scope it.

FAQ

Pricing questions

What counts as a firewall?

A firewall is a single Enforza NVA — one lightweight Linux VM running in your own cloud network, on AWS, Azure, Google Cloud or on-prem. You are billed per firewall, flat, per month. The price does not change with how much traffic the firewall processes, how many rules it runs, or which features you switch on.

Is it really flat — no per-GB charge?

Yes. Enforza is a flat per-firewall subscription priced from £179/month per firewall, with volume pricing that reduces the per-firewall rate as your fleet grows. There is no per-GB data-processing tax, no per-hour endpoint fee, and no per-rule or per-feature charge. The only other cost is the Linux VM you run it on — your own cloud bill — which a cloud-native firewall's NAT and inspection endpoints also require.

How does the volume pricing work?

The per-firewall price reduces with volume — the more firewalls you run, the less each one costs. It is a flat per-firewall rate at each volume tier, with no contract minimum and no bundled commitment. The headline figure is the standard unit price; larger fleets move to the reduced tier automatically.

Which currencies can I pay in?

Enforza is billed in pounds sterling (GBP), US dollars (USD) or euros (EUR). Each currency has its own real, billable price — the figure you select on this page is the price you pay, not a converted estimate. Use the currency switcher to see the price in your currency.

What is included in the Free tier?

Free is a genuine self-serve tier, not a teaser: one firewall in your own network with L3/L4 egress control, network objects, and an owner-only single user — no card required. The paid features — identity-aware L7 (SNI/FQDN) filtering, compliance frameworks, log export to your SIEM, metrics and multi-stream live logs — are not in Free; they unlock on the 14-day Trial and the Licensed plan.

How does the trial work?

The Trial gives you the full feature set for 14 days — identity-aware L7 filtering, one compliance set, one log-export sink to your own SIEM, metrics, audit log and multi-stream live logs — with single-of-each working caps (1 policy, 1 sink, 1 compliance set, 2 users). It is the way to evaluate everything Enforza does before moving to the Licensed plan.

Can I scale down — or up?

Yes. Because billing is flat per firewall with no contract minimum, you pay only for the firewalls you run: add firewalls as you grow (and the per-firewall price reduces with volume), or retire them and the bill comes down with them. There is no per-GB or per-rule meter to reconcile.

Flat, per firewall. No surprises.

One price. No per-GB tax.

From £179/month per firewall, with volume pricing that reduces the rate as your fleet grows — flat, with no per-GB data-processing tax and no per-hour endpoint fee. Start free, no card.