Keytos Shield EZCA EZRADIUS EZSSH EZCMS EZMonitor

How much does Keytos Shield cost?

One low per-user cost. No long-term contracts, no hidden fees, and cancel anytime.

Basic

All-in-one passwordless identity management

  • FIPS 140-3 (Level 2) HSM-backed Root, SCEP, and Smart Card CAs
  • Bring your own Root CA support
  • Cloud RADIUS + RadSec service
  • Entra ID based network policy enforcement
  • Intune device compliance network policy enforcement
  • BYOD support via the Keytos Connect mobile/desktop app
  • FIDO2 passkey + Smart Card onboarding (coming soon)
  • Complete network + audit logs with export to SIEM platforms
  • 99.9% uptime SLA
  • Support within 1 business day

Monthly subscription cost

$0 USD (pay only for licensed users)

Monthly cost per active identity

First 500 users$1.50 USD each
Next 500 users$0.59 USD each
Next 4,000 users$0.25 USD each
Next 5,000 users$0.20 USD each
Every user after 10,000$0.15 USD each
Get started

Premium

Most popular ✦

Protect your most critical users and workflows

  • Everything in Basic, plus:
  • FIPS 140-3 (Level 3) HSM-backed Root, SCEP, and Smart Card CAs
  • S/MIME email signing + encryption management (coming soon)
  • White-labeling with custom assets (coming soon)
  • 99.99% uptime SLA
  • Support within 24 hours

Monthly subscription cost

$0 USD (pay only for licensed users)

Monthly cost per active identity

First 500 users$2 USD each
Next 500 users$1.50 USD each
Next 4,000 users$0.50 USD each
Next 5,000 users$0.25 USD each
Every user after 10,000$0.20 USD each
Get started

Calculate your monthly cost

What plan do you need?

Estimated monthly cost

$1,045

Not sure which plan is best for you?

Talk to one of our identity experts about how Keytos Shield can reduce your IT cost while improving your user productivity and security.

Start free trial Book a demo

Frequently asked questions

Yes! You can start a free 1-month trial of Keytos Shield today with no credit card required. Simply create your subscription, follow the onboarding flow, and get up and running in just a few minutes. If Shield meets your needs simply add a payment method to continue using it.

Keytos Shield starts at just $1.50 USD per licensed user per month, with a tiered pricing model that goes down in price as you add more users.

No. You can get started with Keytos Shield with just a single user. You only pay for the licensed users and there are no minimums or added fees.

No. EZCA and EZRADIUS will continue to run and be supported as standalone services that you can continue to deploy and operate within your environment. Keytos Shield is a new all-in-one platform that is actually built on top of EZCA and EZRADIUS, and provides a more SaaS-like experience for cloud PKI and cloud RADIUS. You can choose which approach better fits your needs.

No, Keytos Shield is a standalone SaaS subscription that includes both cloud PKI and cloud RADIUS functionality.

We don't have a single click migration experience (yet), so you'll need to reconfigure your MDM and network settings to point to your Shield subscription instead of your EZCA and EZRADIUS endpoints.

Yes! During onboarding we'll ask you for the details of your existing PKI environment and if you want to chain your Shield SCEP CA up to your on-premises or 3rd party root CA.

No. Every Keytos Shield subscription comes with Keytos Connect, our mobile and desktop app, at no extra charge. This will get your devices connected to your Shield-enabled Wi-Fi networks in just a few clicks or taps.

Yes! Keytos Shield is available for Azure GCC High customers and tenants so you can connect and protect your most mission-critical workloads.

It's easy to add your Microsoft Cloud PKI certificate authorities to Keytos Shield so you can easily connect your Intune devices to your network. Plus, with Keytos Shield you can issue certificates to additional MDM platforms as well as personal devices via Keytos Connect.