Flexible Plans for Every Organization
Simple, Transparent Pricing
Choose the plan that fits your organization. All plans include core synchronization features with enterprise-grade security.
Starter
Try Identity Mesh free for 30 days.
Free 30-day trial
Start Free Trial
- Up to 100 mesh objects
- 2 connectors
- 7-day audit log retention
- Real-time delta sync
- Basic attribute mapping & transforms
- Tamper-evident audit hash chain
- SIEM forwarding (file + EventLog)
- Windows Integrated Authentication
- Advanced policy transforms
- DSAR + right-to-erasure
- Email support
Most Popular
Professional
For growing organizations with complex identity needs.
$96 /identity/year
Buy Now
1,000 – 50,000 identities
- 1,000 – 50,000 mesh objects (select at checkout)
- 10 connectors
- 90-day audit log retention
- Advanced transforms & precondition scripts
- DSAR + right-to-erasure data flow
- Per-attribute sensitivity classification
- Full SIEM suite (Syslog, Webhook, Sentinel, CEF/LEEF)
- Cloud + on-prem secret stores (Azure KV / HashiCorp Vault)
- Hybrid auth: Windows Integrated + Entra MSAL
- Priority email & chat support
Enterprise
For large organizations with advanced security and compliance requirements.
Custom
Contact Sales
Tailored to your organization
- Unlimited mesh objects
- Unlimited connectors + relay agents
- Unlimited audit log retention
- Everything in Professional, plus:
- Active/passive HA topology + DR runbook
- Service-principal / managed-identity for relay agents
- SOC 2 + ISO 27001 control mappings shipped
- Custom connector development
- Custom support SLA (24/7 phone + email)
Included in every plan
Core platform features every IdentityMesh deployment ships with — no upgrade required.
On-premises deployment via signed MSI
Real-time delta sync (USN / lastUpdated / SHA-256)
Tamper-evident audit hash chain + in-UI verification
Bundled connectors: AD, Entra ID, Okta, SQL, File
DPAPI secret store on the host
SIEM forwarding to file + Windows Event Log
RBAC with 23 named permissions
STRIDE threat model + RFC 9116 security.txt
CycloneDX SBOM published with each release
Customer-side SQL TDE + connection-encryption runbook
Frequently Asked Questions
How are mesh objects counted?
A mesh object is a unique person or entity projected into the mesh from your connected systems. If the same person exists in Active Directory and Entra ID, they are joined into a single mesh object and count once. Group objects and service accounts also count. Erased subjects (right-to-erasure) keep a record stamped with
ErasedAtUtc for the audit trail but the audit metadata row does not consume a license slot.What does the license actually gate?
Four runtime limits: maximum mesh-object count, maximum connector count, audit-retention sweep window, and the advanced-transforms toggle (Roslyn precondition scripts and policy-based attribute flow). Everything else — SIEM forwarding paths, the secret-store provider switch, hybrid authentication, the audit hash chain, DSAR endpoints, threat model, SBOM — ships in every plan and is selected through configuration, not license tier.
Can I change plans later?
Yes, you can upgrade or downgrade your plan at any time. Upgrades take effect immediately, and downgrades take effect at the start of your next billing cycle. Your data and configuration are preserved during plan changes.
What payment methods do you accept?
For online purchases, we accept all major credit cards via Stripe. For larger organizations, we also accept ACH bank transfers and checks — contact sales for details. All Professional and Enterprise licenses are billed annually.
Is there a free trial?
Yes! The Starter plan is a free 30-day trial with up to 100 mesh objects and 2 connectors. No credit card required — just sign up and start synchronizing. When your trial ends or you need more capacity, upgrade to Professional or Enterprise.
What happens if I exceed my identity limit?
When your mesh object count reaches your plan's identity limit, the sync engine will immediately halt the active import and log a license error in the connector audit trail. Existing identities remain intact and accessible, but no new identities will be projected until you upgrade your license. Updates and deletes for already-projected identities continue to work on subsequent sync cycles. You can upgrade your plan at any time to resume full synchronization.
Do you offer discounts for annual billing or nonprofits?
Yes, annual billing includes a discount compared to monthly pricing. We also offer special pricing for nonprofits, educational institutions, and government organizations. Contact our sales team for details.
Need a Custom Quote?
Our team can build a custom package tailored to your organization's specific identity synchronization requirements.