An annual subscription for each production Authcha instance, sized by the number of network devices it serves. Every plan includes support.
Two-factor for every login to your network gear.
Support
Device logins plus 802.1X, MAB and guest Wi-Fi for a campus or region.
Support
Large or regulated estates that need posture, HA and a named engineer.
Support
| Feature | Starter | Professional | Enterprise |
|---|---|---|---|
| Limits | |||
| Network devices (NAS) | |||
| Admin seats | |||
| Production instances per subscription | 1 | 1 | 1 |
| Device administration | |||
| OTP 2FA on device logins: WhatsApp, Telegram, SMS, email | |||
| Access-Challenge, phrase-OTP and password-only flows per NAS | |||
| Four-tier policy inheritance | |||
| Jump-server source-IP enforcement | |||
| Role-based access by user type | |||
| Vendor attribute profiles (30+ platforms) | |||
| Network access control | |||
| 802.1X with EAP-TTLS | |||
| MAC Authentication Bypass | |||
| Device classes: VLAN, QoS, bandwidth, session timeout | |||
| Traffic quotas with RFC 5176 CoA-Disconnect | |||
| Kea DHCP integration | |||
| Device fingerprinting and classification | |||
| Endpoint posture agent and quarantine | |||
| Guest access | |||
| Guest vouchers with sponsor and approver roles | |||
| Captive-portal redeem page | |||
| Operations | |||
| Live auth stream and audit trail | |||
| Auth simulator | |||
| Admin TOTP | |||
| Automated backups with weekly restore drill | |||
| OIDC single sign-on for admins | |||
| LDAP / FreeIPA directory sync | |||
| API access tokens | |||
| Compliance reporting pack | |||
| Deployment | |||
| Docker deployment on your own hardware | |||
| Offline license verification, no telemetry | |||
| Air-gapped deployment assistance | |||
| High-availability deployment guidance | |||
| Support | |||
| Support channel and response | |||
| Onboarding and migration assistance | |||
Your license is a small signed file (Ed25519) that you paste into Settings → License. Authcha verifies the signature against a public key built into the product, so it needs no license server and makes no outbound call. An optional check-in for renewal reminders exists, and it is off unless you configure it.
Authentication is never interrupted. OTP, 802.1X and MAB logins keep working, and so do all existing devices, users and admin accounts. Only new provisioning pauses: adding admins, devices, users or vouchers. The console shows a banner until a renewed license is installed; renewal is a new file pasted in the same place.
One Authcha deployment, with its own database, serving your live network. Authcha is single-tenant, so separate organisations need separate instances. If you also plan to run lab, staging or standby instances, tell us and we'll cover them explicitly on the quote.
Every feature, for 30 days, on your own hardware. No credit card and no license file needed to start. Keep your configuration when you buy; installing the license is the only change.
By invoice against a purchase order, annually in advance. INR prices are exclusive of GST, which is added at the applicable rate. USD prices are for customers outside India.
Help with installing, configuring, upgrading and troubleshooting Authcha. Response times depend on the plan: next business day on Starter, 4 hours during business hours on Professional, and 24×7 with a named engineer on Enterprise.
The public sandbox has sample devices, users, vouchers and live auth traffic. Use it as an admin, a read-only NOC engineer or a front-desk sponsor.