No tiers, no bundle needing to be pulled apart, and no telephone call standing between you and a price. Each line has a rate, a unit it counts, and a keyway page explaining what it does and where it stops. Choose the ones your practice actually needs and they merge into one monthly subscription.
Getting the count wrong is the commonest way a subscription ends up wrong. This table says what each unit includes and, more usefully, what it does not, so the number you type is the number you meant.
| Unit | One of these means | Not counted here |
|---|---|---|
| per protected endpoint | Each workstation, laptop and server you want the detection agent installed on. | Hardware that cannot take an agent, phones, and anything you have deliberately left out. |
| per Kubernetes node | Worker and control plane nodes across the clusters in scope. | Pods, containers and namespaces. They come and go; the node is the billable object. |
| per endpoint | Each machine you want held to the allowlist. | Servers you have chosen to exclude, and any device that is not enrolled. |
| per mailbox | Every mailbox you want protected, shared and departmental boxes included. | Distribution lists and aliases. They are addresses, not mailboxes. |
| per user | Each member of staff you want inside the simulation and training campaigns. | Service accounts, and shared logins, which ought not to exist in the first place. |
| per managed device | Each machine you want monitored and patched. Filtering is counted separately, on the same devices you choose to filter. | Personal hardware you have not enrolled, and locked clinical equipment. |
| per Apple device | Macs, iPads and iPhones owned by the practice. | Staff owned Apple hardware you have not brought under management. |
| per mobile device | Handsets and tablets the practice owns, on either Android or iOS. | Desktops and laptops. Those belong on the monitoring line. |
| per device | Each machine you want read for sensitive files. Enforcement carries its own count, taken across whichever devices you decide to enforce upon. | Cloud storage that no covered device ever touches. |
| per Windows workstation | Windows machines whose value sits in documents rather than in the whole build. | Servers, and machines you are already covering with a full image line. |
| per workstation | Any workstation you would otherwise have to rebuild from nothing. | Servers and virtual guests, which have their own lines. |
| per physical server | Servers running on their own hardware, database hosts included. | Virtual guests. Those are counted on the virtual line. |
| per virtual server | Each virtual machine guest you are protecting. | Hypervisor hosts. Count guests, never hosts. |
| per licensed user | Each licensed Microsoft 365 or Google Workspace user you want a copy held for. | Unlicensed accounts, shared mailboxes with no licence, and resource accounts. |
| per company file | Each QuickBooks Online company you keep. | Individual users inside one company file. |
| per tenant | Each Entra ID directory your organization operates. | Users inside it. This one is priced by the directory. |
| per protected system | Each system whose restores you want proven and evidenced. | Systems you are content to assume will restore. |
Add what you need from here. Counts can be corrected on the keyring at any point before checkout, and each card links through to the keyway page that explains the line properly.
Six lines across workstations, servers and Kubernetes nodes, offered at three response levels. Open the keyway.
One line. Only what you approved gets to run where it matters. Open the keyway.
Two lines. Protection working inside the mailbox, and the rehearsals belonging beside it. Open the keyway.
Four lines. Patch state and inventory, Apple estate control, web filtering, and mobile handsets. Open the keyway.
Two lines. Locate the files carrying patient detail, then govern where copies may travel. Open the keyway.
Nine lines. Copies of files, machines, servers, mailboxes and tenants, plus proof they restore. Open the keyway.
Heads up: card statements show FORTIFY 24X7 - Health Lock Solutions is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.