Pricing

Three tiers.
No surprises.

Start free on the hosted control plane, license the self-hosted binary, or move to Enterprise for source-available access and independent audit rights.

Hosted Free

Managed control plane

$0forever

A managed mezhub instance for hobbyists and evaluation. Small identity and node caps; community support. Closed-source binary running on our infrastructure.

Sign Up Free
  • Managed mezhub control plane
  • Up to 5 identities
  • Up to 5 nodes
  • SSH certificate-based authentication
  • Session recording (7-day retention)
  • Basic RBAC roles
  • OIDC SSO (Google / GitHub)
  • Audit log (community support)

Self-Hosted

Run on your infrastructure

From $9per identity / month

Licensed signed binary you run on your own infrastructure. Full feature set, unlimited scale, billed per identity. Closed source — distributed only as signed binaries and container images.

Get a License
  • Signed mezhub binary + container image
  • Unlimited identities and nodes
  • Full RBAC with deny rules
  • OIDC, SAML, LDAP/AD SSO
  • Session recording with full retention
  • Access requests & JIT access
  • Per-session MFA (TOTP & hardware keys)
  • Machine identity (mezd identity / SPIFFE)
  • Email support

Enterprise

Source access included

Custom

Self-Hosted plus a source-available license. Your security team gets the full source for independent review, scanning, and compliance — under a non-redistributable enterprise license.

Talk to Sales
  • Everything in Self-Hosted
  • Source-available license for audit & scanning
  • Reproducible builds you can verify against shipped binaries
  • Independent SAST / DAST and pentest rights
  • Device trust
  • Moderated sessions
  • Dedicated security engineer & SLA
  • Onboarding and architecture review
  • Priority CVE pre-disclosure
Why closed source?

Controlled distribution, audited where it matters

Mezite ships as signed binaries and container images. We do not publish source publicly. This is a deliberate commercial and security posture: it keeps the build pipeline and key material under our control, and reduces the surface available to opportunistic source scanning.

For customers who require source-level review — security teams, auditors, regulated industries — Enterprise customers receive a source-available license with rights to read, audit, scan, and pentest the codebase. See Enterprise Source Access for terms.

What counts as an identity?

Users, machines, and AI agents

An identity is anything that authenticates through Mezite and receives a certificate — human users via SSO, machine identities managed by mezd (CI/CD pipelines, services), and AI agents that need SSH access to infrastructure.

Users

Human engineers, operators, and admins who SSH into nodes

Machines

CI/CD pipelines, services, and automation via mezd identity

AI Agents

Autonomous agents that need authenticated infrastructure access

FAQ

Common questions

Is Mezite open source?

No. Mezite is closed source and proprietary. We distribute signed binaries and container images only. Enterprise customers receive a source-available license for audit and scanning purposes.

Can I see the source before buying Enterprise?

We provide source-access evaluation under NDA for serious Enterprise prospects. Contact sales@mezite.com. The Hosted Free and Self-Hosted tiers do not include any source access.

How do I trust a closed-source security product?

Through reproducible builds, signed releases, third-party audit reports, SOC 2 controls, and responsible disclosure. Enterprise customers can additionally inspect, scan, and pentest the source themselves.

What happens when I exceed Hosted Free limits?

You can upgrade to a paid Hosted plan or move to Self-Hosted. Hosted Free is intended for evaluation and small personal deployments only.

Do machine identities and AI agents count?

Yes. Every identity that authenticates through Mezite counts — users, mezd identity instances, and AI agents.

Can I redistribute the Enterprise source?

No. The Enterprise license grants read, audit, scan, and pentest rights to your organization. Redistribution, public release, or building competing products from the source is not permitted.

Closed source · signed binaries

Pick the tier that fits how you want to run it

Try it free on our hosted control plane, license the binary for your own infrastructure, or step up to Enterprise for source-available review.