Pricing
Priced by device, not by certificate.
A device is a distinct certificate subject that is currently valid. Re-enrolling does not use another slot — SCEP devices re-enroll rather than renew, so one laptop collects several certificates over its life and you should not be billed for hardware you do not have. Revoking a device frees its slot immediately.
The first five devices are free, permanently. There is no trial clock and no card to enter — you pay when you outgrow them, not when a countdown runs out.
A refund reverses the service as well as the payment: certificates issued during the refunded period are revoked, and those devices stop authenticating.
Prices in South African Rand, inclusive of any applicable VAT. Nothing renews automatically — each period is a separate payment, and we email you before one ends.
What counts as a device
One distinct certificate subject with a currently-valid certificate. A laptop that re-enrolls every year is one device for as long as you have it, however many certificates it has accumulated.
Revoke a device and the slot is free the moment you do it — useful when hardware is replaced mid-period.
What happens if you stop paying
You get a 30-day grace period. Your devices keep working and keep re-enrolling throughout it, and only adding new devices stops. We warn you by email and on your dashboard as it runs down.
After 30 days the certificates issued under that plan are revoked, and those devices stop authenticating. Renewing at any point inside the grace period cancels that — nothing is revoked and nothing has to be re-enrolled.
Your account is not closed either way: it returns to the free tier, and the first five devices carry on as they always did.
Five devices, free, for as long as you want them.
No card and no expiry date. Enough to prove the whole path — and enough to keep running a small fleet on, if that is all you need.
Start freeNot sure yet? Read how it works, or the guides on SCEP servers and 802.1X certificate authentication.