Per-device pricing, billed annually. Every tier includes the full authentication architecture, RoCi threat intelligence, and per-client telemetry. No feature gating on security capabilities.
Full Protective DNS coverage for smaller organizations. Zero endpoint agents, per-client authentication, and RoCi threat intelligence from day one.
The complete platform for growing security teams. Full deployment flexibility, advanced telemetry, custom threat feeds, and priority support for organizations scaling toward enterprise.
Custom pricing for large fleets, regulated industries, and organizations with specific compliance, SLA, or on-premise deployment requirements. Includes dedicated support and roadmap input.
Volume discounts apply across all tiers. Organizations with 250+ devices receive automatic volume pricing — contact us before purchasing and we will provide a custom quote. Multi-year contracts receive an additional 10% discount on top of annual billing savings. MSP and reseller pricing is available for organizations managing multiple client environments.
The on-premise virtual appliance is available on Business and Enterprise plans. It deploys the full Nantevo resolver stack inside your data center or private cloud — queries are resolved locally, CDN outages are irrelevant, and no DNS content ever leaves your infrastructure.
Appliance pricing is included in Business and Enterprise plan subscriptions. Deployment assistance and appliance configuration support are included with Business priority support and Enterprise dedicated support.
Available on Business (101+ devices) and Enterprise plans
A select group of enterprise security teams can access the full Nantevo platform at significantly reduced rates in exchange for structured feedback, quarterly roadmap sessions, and the willingness to work through early-stage rough edges with the team.
Nantevo is a production-proven platform with 2.5 years of operational history — but it's being positioned for enterprise at scale for the first time. The organizations that deploy first will encounter integration requirements, compliance edge cases, and operational workflows that haven't been tested at enterprise scale yet.
Design partners get a platform that works — and the opportunity to make it work exactly the way their environment requires. In exchange for reduced pricing and direct engineering access, they provide the real-world feedback that makes Nantevo enterprise-ready for everyone.
Every tier includes the full authentication architecture and RoCi threat intelligence. Additional capabilities scale with organizational complexity.
| Feature | Starter Up to 100 devices |
Business 101–1,000 devices |
Enterprise 1,000+ devices |
|---|---|---|---|
| Core authentication & protection | |||
| Authenticated DoH — zero agents | ✓ | ✓ | ✓ |
| MDM profile auto-generation (Apple) | ✓ | ✓ | ✓ |
| Windows 11, Android, browser, Linux/BSD | ✓ | ✓ | ✓ |
| Per-client filtering policy | ✓ | ✓ | ✓ |
| DGA, C2, malware, phishing blocking | ✓ | ✓ | ✓ |
| RoCi AI threat intelligence | ✓ | ✓ | ✓ |
| Instant proxy-layer revocation | ✓ | ✓ | ✓ |
| Telemetry & visibility | |||
| Per-client telemetry dashboard | ✓ | ✓ | ✓ |
| Incident logging & alerts | ✓ | ✓ | ✓ |
| Query content logging | — | ✓ | ✓ |
| Custom retention policy | — | ✓ | ✓ |
| SIEM integration (API) | — | ✓ | ✓ |
| RoCi sensitivity tuning per client | — | ✓ | ✓ |
| Deployment | |||
| Cloud deployment | ✓ | ✓ | ✓ |
| Hybrid deployment | — | ✓ | ✓ |
| On-premise virtual appliance | — | ✓ | ✓ |
| Custom subdomain endpoint | — | ✓ | ✓ |
| Legacy device forwarder | — | ✓ | ✓ |
| Custom threat feeds | — | ✓ | ✓ |
| Support & SLA | |||
| Email support | ✓ | ✓ | ✓ |
| Priority support (email + Slack) | — | ✓ | ✓ |
| Dedicated support engineer | — | — | ✓ |
| Uptime SLA | — | 99.9% | Custom |
| Compliance documentation | — | — | ✓ |
| Quarterly roadmap sessions | — | — | ✓ |
| Admin users | 5 | 25 | Unlimited |
We'll walk through your environment, fleet size, and compliance requirements — and recommend the deployment model and tier that actually fits. No pressure, no pipeline.