Commercial
Choose a Tailscale plan based on the use case, not only occupied seats.
Provisioned users occupy reusable tailnet seats when they first use the admin console or authenticate a device. Tagged and ephemeral resources, plan limits, posture integrations, JIT, logging, platform extensions and contractual requirements also affect the commercial model.
Business plans
Start with the required controls and current published allocations.
Tailscale pricing and feature allocations can change. The summary below was last verified against official pricing on 29 July 2026; Defense First rechecks the recommendation before every proposal and production decision.
Standard
Publishes unlimited paid user seats, an allocation of 10 ACL groups, 1,000 ephemeral-resource minutes per month, SCIM, expanded roles and third-party MDM/EDR posture integrations.
Premium
Publishes allocations of 300 ACL groups and 10,000 ephemeral-resource minutes per month, plus JIT, advanced Tailscale SSH, network flow logs, log streaming and regional routing.
Enterprise
Custom quantities, pricing and bundling, MSA/SLA terms, invoicing, support and product-extension packages for organisation-specific scale and governance.
Plan-selection checklist
Seats, resources, capabilities and extensions are separate dimensions.
- How many occupied user seats, tailnets and ACL groups are required?
- All current plans include 50 tagged resources; how many additional servers, routers, connectors or shared resources are required?
- Are 1,000 monthly ephemeral-resource minutes sufficient, or is the Premium 10,000-minute pool or a custom Enterprise quantity required?
- Are SCIM, MDM/EDR posture, geolocation or custom posture attributes required?
- Are JIT, advanced SSH, beta SSH recording, network flow logs or log streaming required—and on which current plan?
- Are Border0/PAM, Aperture, CI/CD, Workload Connectivity or Edge & IoT extensions in scope?
Licences and platform extensions are separate
The customer purchases Tailscale licences directly from Tailscale and owns the tailnet. Additional tagged resources are currently billed separately beyond the included 50. An ephemeral device that remains present for more than four hours is counted as a standard tagged resource rather than against the minute pool.
Defense First's Advice, Integrate and Manage services are priced separately, and the wider platform extensions are not current standard Defense First deliverables.
AIM model
The licensing decision is documented before implementation.
Advice produces a dated plan recommendation based on use cases, occupied seats, resource quantities and controls. Integrate implements only capabilities supported by the selected plan and extension. Manage rechecks material changes in seats, resources and capabilities during ongoing management.
