Session setup
Auth-X
Establish device identity and a trusted session for your existing data path.
50 included; +$0.75/device
500 included; +$0.45/device
- Device admission
- Key agreement and session setup
- Use your existing data path
Pricing proposal
Start with device identity, protect telemetry using an existing trusted session, or choose the complete Secure-X path.
The pilot comes first. Subscription figures below are targets for a future production release, not plans available to buy today.
Products
Three proposed licenses, two fleet sizes. Secure-X includes both Auth-X and Tunnel-X for less than buying them separately.
Proposed production pricing. These licenses are not available to purchase yet; the design-partner pilot comes first.
Session setup
Establish device identity and a trusted session for your existing data path.
50 included; +$0.75/device
500 included; +$0.45/device
Protected telemetry
Protect telemetry using a trusted session from a compatible external provider.
50 included; +$1.10/device
500 included; +$0.65/device
Complete path
Identity and protected telemetry in one integrated device-to-sink path.
50 included; +$1.50/device
500 included; +$0.90/device
USD per month. Annual prepay reduces the base by 15%; additional devices are billed monthly.
The current reference build runs as one integrated protocol. Separate module interfaces, including Tunnel-X with an external session provider, still require testing.
For Secure-X, Team and Fleet meet at 450 active devices.
Estimate your monthly license
Choose a product and your expected active devices
Registered devices with an accepted authenticated session this month.

Estimated monthly total
Base $199 · 50 × $1.50 overage
Auth-X and Tunnel-X in one device-to-sink path.
Annual prepay saves 15% on base; overage stays monthly.
Enterprise
Multi-site deployments · custom integrations · SLA · rollout support
Talk to our teamProposed design partner pilot
8 weeks · up to 5 concurrent devices
50% of the pilot fee is credited toward an annual Secure-X license.
Credit applies when signed within 90 days of pilot completion.
Explore pilotDetails
Proposed USD pricing for customer-hosted deployments.
| License | Base / month | Devices included | Overage / device / month |
|---|---|---|---|
| Auth-X Team | $99 | 50 | $0.75 |
| Tunnel-X Team | $149 | 50 | $1.10 |
| Secure-X Team | $199 | 50 | $1.50 |
| Auth-X Fleet | $399 | 500 | $0.45 |
| Tunnel-X Fleet | $599 | 500 | $0.65 |
| Secure-X Fleet | $799 | 500 | $0.90 |
| Enterprise | Custom | Contracted | Contracted |
Secure-X saves $49 per month on Team or $199 on Fleet versus the two standalone base licenses. An Auth-X customer can upgrade to Secure-X for an additional $100 Team or $400 Fleet base per month. Annual prepay reduces base fees by 15%; overage remains monthly. A Secure-X device is counted once. No per-message or per-GB fee applies.
| Capability | Auth-X | Tunnel-X | Secure-X |
|---|---|---|---|
| Device identity | ✓ | External provider | ✓ |
| Session setup | ✓ | External provider | ✓ |
| Protected telemetry | — | ✓ | ✓ |
| Frame sequence checks | — | ✓ | ✓ |
| In-band rekey | — | Interface planned | ✓ |
| Customer-hosted gateway | ✓ | ✓ | ✓ |
Tunnel-X as a separate license depends on a tested external session-provider interface; that interface is not yet available. The customer provides gateway infrastructure, connectivity and telemetry storage. Hosted operation, adapter engineering, on-site installation and formal SLAs are quoted separately.
Good to know
Secure-X is the proposed bundle of Auth-X and Tunnel-X. Auth-X authenticates a device and establishes its session; Tunnel-X protects telemetry on that session. Today they are product labels for one working device-to-sink protocol; separate module interfaces are still being designed.
A unique registered device with at least one accepted authenticated session during the billing month. Devices with no accepted session are not billed. Overage is billed monthly in arrears, with usage alerts at 80% and 100% of the allowance. Billing thresholds never interrupt an established session.
Prepay annually for 15% off the base subscription. The base is paid upfront; additional active-device usage remains billed monthly.
Production subscriptions are proposed, not currently available to purchase. The paid design-partner pilot comes first while scale testing, reliable metering, integration boundaries and operating procedures are completed.
The proposed $2,500 fixed-fee, eight-week engagement covers up to five concurrent ESP32-class devices, one customer-controlled sink and telemetry use case, an integration workshop, deployment steps, a test report and scheduled engineering support. It has no production uptime SLA. 50% of the pilot fee is credited toward the first annual Secure-X license if signed within 90 days after completion. The statement of work sets acceptance criteria and hardware, network and custom firmware responsibilities. A supervised evaluation of up to five lab devices may come first; there is no self-service cloud tier.
You provide and pay for gateway infrastructure, connectivity and retained telemetry storage. Customer-hosted plans include updates and email support, with no per-message or per-GB charge. Hosted operation, custom firmware or SDK work, on-site installation and formal SLA support are quoted separately.
That is the proposed separate license for customers who already have a compatible identity and session provider. Tunnel-X still needs a trusted session to protect telemetry. Its external provider interface must be designed and tested before standalone production sales; integration work is scoped separately. Customers using Auth-X can upgrade to Secure-X instead.
We can scope a focused pilot if your session provider can supply the trust and key state Tunnel-X needs. The standard $2,500 pilot covers the current integrated path; external adapter design and validation are quoted in the statement of work.