Start free. Unlock by edition. Scale by capacity.
Run MisterShell free on 25 managed resources — every session type, from the browser or your own SSH client, plus health, snapshots, operational facts, and built-in AI. It is not a trial: the Free edition never expires. When you are ready, each edition unlocks the next layer — authoring and reporting (Base), remote workers, enterprise sign-in, high availability and audit export to your SIEM (Pro), and policy-driven governance with session recording and automation (Enterprise). List prices are published below — or talk to us for a trial license to evaluate Pro or Enterprise on your own infrastructure before you buy.
An edition ladder, priced by capacity
- Free — 25 resources, forever. The default when no license is installed, and not a trial: it never expires. Every session type — in the browser or from your own SSH client — session sharing and live observation, health, metrics, configuration snapshots, operational facts, file transfer with the location-mounted file catalog, and the built-in AI agents are all included.
- A ladder, not a maze. Each edition includes everything below it. Base adds authoring — your own commands, AI agents, prompts and skills — plus report templates and report generation, and resource capacity licensed to your estate. Pro adds the security layer: remote workers, enterprise sign-in (LDAP, OIDC, SAML), multi-core high availability, and audit export to your SIEM. Enterprise adds the governance layer: session, recording, file transfer, fact and configuration policies — with approval before access where you require it — session recording, automation playbooks, and configuration push.
- Licensed locally, yours to move. A key is bound to the email you bought it with, not to a machine — rebuild or move the installation and it keeps working. Preview any key before you install it to see exactly what it grants. Nothing ever phones home.
- Capability add-ons. IDS Sensors (by number of sensors), Syslog Collector (by number of collecting workers), and Session Proxy for external access (by number of proxies) each scale on their own capacity dial. Add-ons pair with any paid edition.
- Audit export out, log collection in. Forwarding MisterShell's own audit events to your SIEM — syslog/CEF or webhook — comes with the Pro edition. Pulling device and server logs in is a different thing entirely: the Syslog Collector add-on, which pairs with any paid edition.
- Packs that stack. Capacity comes in packs of 50, 100, 500 and 1,000 resources, priced per edition and published below. Packs of the same edition stack, so you license the count you actually manage. Hold several editions and the highest one wins. A paid pack replaces the free 25 rather than adding to it.
Four editions, priced by capacity
Start free on 25 resources — no time limit. Each edition includes everything below it and is licensed by capacity. Trial licenses for Pro and Enterprise are available for PoCs, so every capability in this table can be evaluated on your own infrastructure.
| Capability | Free Evaluate & run small — forever | Base Author, report & size to your estate | Pro Secure & scale out | Enterprise Govern, record & automate |
|---|---|---|---|---|
| Managed resources | 25 | By license | By license | By license |
| Unlimited users | ||||
| Standard Web support 8x5 Enterprise support available through custom quotes or agreements. | — | |||
| All session types — SSH, cloud CLI, Kubernetes, databases, RDP, VNC, web apps | ||||
| Your own SSH client & automation — terminal workspace with tabs and AI, same policy as the browser | ||||
| Session sharing & live observation | ||||
| Health, metrics & configuration snapshots | ||||
| Operational facts | ||||
| Encrypted credential store — service account credentials plus a personal & team vault | ||||
| File transfer & file catalog — object stores mounted per location Governing transfers with File Transfer Policy is Enterprise. | ||||
| AI assistance — built-in agents, bring your own LLM | ||||
| REST API, official Terraform provider & MCP endpoint for external AI agents | ||||
| Local sign-in with authenticator-app or email MFA | ||||
| Custom commands, AI agents, prompts & skills | — | |||
| Report templates & report generation Scheduled generation runs through Automation (Enterprise). | — | |||
| Remote workers | — | — | ||
| Enterprise authentication (LDAP, OIDC, SAML) | — | — | ||
| External AI agents sign in through your OIDC provider | — | — | ||
| Multi-core high availability | — | — | ||
| Audit event export — syslog/CEF or webhook to your SIEM | — | — | ||
| Session policy, per-command ACLs & access approvals | — | — | — | |
| File Transfer Policy — ordered accept/deny rules & access approvals on every copy | — | — | — | |
| Session recording & replay — terminal, RDP, VNC and web sessions | — | — | — | |
| Fact Policy compliance checks | — | — | — | |
| Configuration templates, stacks & push | — | — | — | |
| Automation playbooks | — | — | — | |
| Deploy Free | Try Base | Try Pro | Try Enterprise |
List prices are published below in resource packs. Talk to us for a trial license, or a volume quote from 5,000 resources.
Add only what you need
Each add-on pairs with any paid edition and scales on its own dial — not a higher tier you have to climb to.
Session Proxy — external & vendor access
Capacity by number of proxies
Invite external guests and vendors to governed sessions — account-less, reached over a deployed proxy, and off until an administrator enables them.
Syslog Collector
Capacity by collecting workers
Collect inbound device and server syslog into MisterShell — attributed to the right resource and searchable in context alongside health and configuration history.
IDS Sensors
Capacity by number of sensors
Passive intrusion-detection sensors stream network-layer alerts — always in detect mode, never in the data path — linked to the managed resource they concern.
Capacity in packs, priced per edition
Pick the edition, then buy capacity in packs of resources. Packs of the same edition stack, so you license the count you actually manage — 520 resources is a 500-pack plus a 50-pack. Annual list prices in USD, excluding tax.
The team's connection manager — with AI that knows your infrastructure.
vs terminal & RDP clients →Privileged remote access — workers into segmented sites, enterprise sign-in, high availability and SIEM export, where you would otherwise run bastions or a PRA product.
vs bastions & proxies →The governance layer — session policy, recording, compliance checks and automation: the privileged-access essentials.
vs PAM suites →| Pack | Base | Pro | Enterprise |
|---|---|---|---|
| 50 resources | $500 /yr $10 per resource | $2,000 /yr $40 per resource | $4,000 /yr $80 per resource |
| 100 resources | $800 /yr $8 per resource | $3,200 /yr $32 per resource | $6,400 /yr $64 per resource |
| 500 resources | $3,000 /yr $6 per resource | $12,000 /yr $24 per resource | $24,000 /yr $48 per resource |
| 1,000 resources | $4,000 /yr $4 per resource | $16,000 /yr $16 per resource | $32,000 /yr $32 per resource |
| Custom | Enterprise-grade capabilities backed by professional execution.
| ||
- A paid pack replaces the free 25 resources rather than adding to them — with 30 resources, a 50-pack licenses 50.
- Packs of the same edition stack. Hold several editions and the highest one wins, so buy your packs in one edition.
- From 5,000 resources, pricing is a volume quote. Add-ons — IDS Sensors, Syslog Collector, Session Proxy — are quoted separately.
What would my estate cost?
Enter how many resources you manage. We work out the cheapest pack combination for each edition.
Annual list prices in USD, excluding tax. A paid pack replaces the free 25 rather than adding to them. Each edition includes everything below it.
Get in Touch
Want a guided demo, or a trial license to evaluate Pro or Enterprise on your own infrastructure? Tell us — we'd love to hear from you.