Choose your plan
Monthly
Yearly
Starter
Remote access essentials for at-home users and testing.
Free
per user / month
Up to 5 users
Broad OS compatibility including macOS, Windows, Linux, and iOS, Android, and more
Enterprise peer-to-peer connections
Split tunneling
Conditional access controls
Teams
Modern network access for teams looking to retire their legacy VPN.
$6
$5
15% savings
per user / month
Everything in Starter, plus:
Up to 100 users
SSO via Google Workspace
SaaS application gating
Native device posture checks
MFA for bastion host, SSH, and more
Automated least privilege policies
Most Popular
Business
Integrated and automated security controls for growing teams.
$12
$10
15% savings
per user / month
Everything in Teams, plus:
Up to 500 users
User provisioning & management via IdP
SSO via Okta, Entra ID, and more
Device posture and endpoint detection integrations
Secure service accounts
DNS filtering*
Data Loss Prevention controls
Enterprise
Comprehensive network security for organizations operating at scale.
Custom
per user / month
Everything in Business, plus:
Custom account sizes
Custom MSA & SLAs
Pay by invoice
DNS filtering*
Geoblocking
Exit Networks
Data Loss Prevention controls
Priority support
Additional support options*
*Available as add-on
Choose your plan
Monthly
Yearly
Starter
Remote access essentials for at-home users and testing.
Free
per user / month
Up to 5 users
Broad OS compatibility including macOS, Windows, Linux, and iOS, Android, and more
Enterprise peer-to-peer connections
Split tunneling
Conditional access controls
Teams
Modern network access for teams looking to retire their legacy VPN.
$6
$5
15% savings
per user / month
Everything in Starter, plus:
Up to 100 users
SSO via Google Workspace
SaaS application gating
Native device posture checks
MFA for bastion host, SSH, and more
Automated least privilege policies
Most Popular
Business
Integrated and automated security controls for growing teams.
$12
$10
15% savings
per user / month
Everything in Teams, plus:
Up to 500 users
User provisioning & management via IdP
SSO via Okta, Entra ID, and more
Device posture and endpoint detection integrations
Secure service accounts
DNS filtering*
Data Loss Prevention controls
Enterprise
Comprehensive network security for organizations operating at scale.
Custom
per user / month
Everything in Business, plus:
Custom account sizes
Custom MSA & SLAs
Pay by invoice
DNS filtering*
Geoblocking
Exit Networks
Data Loss Prevention controls
Priority support
Additional support options*
*Available as add-on
Choose your plan
Monthly
Yearly
Starter
Remote access essentials for at-home users and testing.
Free
Up to 5 users
Broad OS compatibility including macOS, Windows, Linux, and iOS, Android, and more
Enterprise peer-to-peer connections
Split tunneling
Conditional access controls
Teams
Modern network access for teams looking to retire their legacy VPN.
$6
$5
15% savings
per user / month
Everything in Starter, plus:
Up to 100 users
SSO via Google Workspace
SaaS application gating
Native device posture checks
MFA for bastion host, SSH, and more
Automated least privilege policies
Most Popular
Business
Integrated and automated security controls for growing teams.
$12
$10
15% savings
per user / month
Everything in Teams, plus:
Up to 500 users
User provisioning & management via IdP
SSO via Okta, Entra ID, and more
Device posture and endpoint detection integrations
Secure service accounts
DNS filtering*
Data Loss Prevention controls
Enterprise
Comprehensive network security for organizations operating at scale.
Custom
per user / month
Everything in Business, plus:
Custom account sizes
Custom MSA & SLAs
Pay by invoice
DNS filtering*
Geoblocking
Exit Networks
Data Loss Prevention controls
Priority support
Additional support options*
*Available as add-on
Compare Features
Monthly
Yearly
Starter
Free
Teams
$5 user / mo
$6 user / mo
Business
$10 user / mo
$12 user / mo
Enterprise
Custom
Account
Users
5
100
500
Custom
Admin users
Admin users can manage your Twingate account
1
3
10
Custom
User devices
User devices are laptops, phones, tablets, etc used to access Resources protected behind Twingate
5 per user
5 per user
5 per user
Custom
Remote Networks
Remote Networks are logical network segments used to organize the Resources protected behind Twingate
10
20
100
Custom
Resources
Resources are network addresses protected behind Twingate
20
50
100
Custom
Networking & Connectivity
Peer-to-peer connections
Direct connections between Users and Remote Networks to minimize latency
Gobal Relay Network
Globally distributed relay network to facilitate peer-to-peer connections and relayed connections
High availability network Connectors
Network Connectors cluster automatically for load balancing and failover
Geo-based Connector routing
Autommatically route users' connections to the closest Connector geographically to reduce latency
Wide support for network environments
Support for private networks hosted on-premise or with AWS, Azure, Google Cloud Platform and many others
Desktop and mobile apps
Client support for macOS, Windows, Linux, and iOS, Android, and ChromeOS
End-to-end encryption
IPv4 and IPv6 support
Split Tunnelling
Control what client traffic gets routed through your network, and what doesn’t
DNS-based routing
Define and route to network resources using existing DNS names without additional configuration
DNS aliases
Add convenient Alias addresses for network resources without configuring DNS records
IP egress controls
Route public internet addresses through your Remote Networks to support IP egress controls
User Management
Daily encryption key rotation
Single Sign On (SSO) support
Use 3rd party services like Google, LinkedIn, and Github to login to Twingate
Google Workspace integration
Integration with Google Workspace for SSO and group management
Okta integration
Integration with Okta for SSO and group management
Microsoft Entra ID integration
Integration with Microsoft Entra ID for SSO and group management
JumpCloud integration
Integration with JumpCloud for SSO and group management
Other Enterprise IdP integrations
Integrations with other major SSO and identity providers like Keycloak and OneLogin
Advanced Admin roles
Advanced user roles including Admin, DevOps, Support, and Access Reviewer to manage administrative actions
IdP + Social login
Enable users to login with common Social Logins in addition to an integrated Identity Provider
Access Controls
Network-level access policies
Control user access at the network level
Resource-level access policies
Control user access at the resource level
GUI to manage access policies
Manage access control policies with a GUI-based Admin Console
Add MFA support for any resource
Support for biometrics, & security keys
Universal MFA supports WebAuthn authentication methods
Role based access controls
Assign access to resources by groups
Usage-based access policies
Set minimum usage requirements to maintain access to sensitive resources
Time-bound access policies
Automatically revoke resource access when a set time limit is reached
Device-only access policies
Define access policies for Trusted Devices to access Resources without additional user authentication
Device Security
Native device posture controls
Minimum OS policies
Restrict access to minimum OS versions
Trusted device profiles
CrowdStrike integration
Require CrowdStrike for trusted device policies in Twingate
Microsoft Intune integration
Require Microsoft Intune for trusted device policies in Twingate
Jamf integration
Require Jamf for trusted device policies in Twingate
Kandji integration
Require Kandji for trusted device policies in Twingate
SentinelOne integration
Require SentinelOne for trusted device policies in Twingate
Other MDM and EDR integrations
Integrations with other endpoint security products like 1Password Device Trust
Internet Security
Encrypted DNS
Device-wide encrypted DNS via Twingate Secure DNS with support for custom DNS-over-HTTPS (DoH) resolvers
Custom DNS filtering
Add on
Add on
Content filtering controls
Add on
Add on
Security filtering controls
Add on
Add on
Network-level DNS filtering
Apply DNS Filtering controls on your router or firewall
Add on
Add on
Browser Security (beta)
Data and SaaS controls via the Twingate Enterprise Browser Extension
Exit Networks (beta)
Route all traffic through defined egress points for enhanced security
Automation
Automate with Terraform & Pulumi
Programmatically deploy and manage your Twingate network with native providers for Terraform & Pulumi
Twingate Kubernetes Operator
Admin API
For programmatically administering Twingate
Secure service accounts
Accounts used by machines to securely access privileged resources required by unattended tasks and automated processes like CI/CD pipelines
Analytics
Network analytics
Extensive logging and analytics of network access activity
Real time network logs
Exportable real time network analytics
Admin audit logs
Audit logs for changes to Admin Console
Log retention
Minimum period for log storage
24 hours
7 days
30 days
12 months
Sync logs to S3 bucket
Sync logs to SIEM
Visual Access Graph (beta)
Visually map user access across a Twingate environment
Services & Support
Community support
Basic support
Access to Twingate technical support via ticketing system
Priority support
Access to Twingate technical support via ticket system with prioritization of responses
Additional support options
Plans available
Plans available
Billing & Terms
Pay by credit card
Pay by invoice
Some restrictions apply. Contact us for details
Custom MSA & SLAs
Frequently Asked Questions
How long does it take to set up Twingate?
How long does it take to set up Twingate?
If I set up Twingate, how will my employees and other end users be impacted?
If I set up Twingate, how will my employees and other end users be impacted?
Do I need to shut down my VPN to use Twingate?
Do I need to shut down my VPN to use Twingate?
Is my data secure with Twingate?
Is my data secure with Twingate?
How do I change my existing subscription plan?
How do I change my existing subscription plan?
When will I be billed?
When will I be billed?
What payment methods do you offer?
What payment methods do you offer?
What else can I do to protect myself from cybersecurity risk?
What else can I do to protect myself from cybersecurity risk?
Do you offer special pricing for charities, not-for-profit organizations, and educational institutions?
Do you offer special pricing for charities, not-for-profit organizations, and educational institutions?
Frequently Asked Questions
How long does it take to set up Twingate?
How long does it take to set up Twingate?
If I set up Twingate, how will my employees and other end users be impacted?
If I set up Twingate, how will my employees and other end users be impacted?
Do I need to shut down my VPN to use Twingate?
Do I need to shut down my VPN to use Twingate?
Is my data secure with Twingate?
Is my data secure with Twingate?
How do I change my existing subscription plan?
How do I change my existing subscription plan?
When will I be billed?
When will I be billed?
What payment methods do you offer?
What payment methods do you offer?
What else can I do to protect myself from cybersecurity risk?
What else can I do to protect myself from cybersecurity risk?
Do you offer special pricing for charities, not-for-profit organizations, and educational institutions?
Do you offer special pricing for charities, not-for-profit organizations, and educational institutions?
Trusted by fast-growing companies worldwide
Trusted by fast-growing companies worldwide
Trusted by fast-growing companies worldwide
The VPN replacement your workforce will love.
Solutions
The VPN replacement your workforce will love.
Solutions
The VPN replacement your workforce will love.
Solutions