On this page0
Unfamiliar word? See Glossary: words used in these docs. Looking for the tasks in order? Begin at Start Here.
Reference
Which Plan Includes What
Every part of the product, and the plans that include it. To see which plan your own instance is on, follow Read your license and plan screen.
The Three Plans
The price is for one instance, not for each person: there is no charge by headcount on any plan. A plan is bought by talking to Zonitix and is paid by invoice and bank transfer.
| Plan | For one instance, each month | Or for a year, paid in advance |
|---|---|---|
| Core | $299 | $2,990 |
| Team | $649 | $6,490 |
| Advanced | $1,799 | $17,990 |
What Each Plan Includes
Read across a row: “Yes” means the plan in that column includes it. Plans build on each other, so anything in Core is also in Team and Advanced, and anything in Team is also in Advanced.
| Part of the product | Core | Team | Advanced |
|---|---|---|---|
| Joining and leaving | |||
| Onboarding and offboarding workflows | Yes | Yes | Yes |
| Access by role, requests and reviews | Yes | Yes | Yes |
| Sign-in security: passkeys and MFA | Yes | Yes | Yes |
| People | |||
| Org chart and the employee file | Yes | Yes | Yes |
| Hiring: careers page, offers, screening | Not included | Yes | Yes |
| Offer-letter signing | Not included | Yes | Yes |
| Time off, pay history, goals, reviews and surveys | Not included | Yes | Yes |
| Training: courses, learning paths and phishing simulation | Not included | Yes | Yes |
| Policies your people read and sign | Not included | Yes | Yes |
| Directories and apps | |||
| Connectors to your identity provider and work apps | Yes | Yes | Yes |
| Directory reconciliation across sources | Not included | Yes | Yes |
| SaaS discovery: apps in use, dormant accounts | Not included | Yes | Yes |
| Devices | |||
| Inventory for Mac, Windows and Linux | Yes | Yes | Yes |
| Security checks and optional hardening | Yes | Yes | Yes |
| Device assignment and asset tags | Yes | Yes | Yes |
| Finance | |||
| Invoice capture and approvals | Not included | Not included | Yes |
| Budgets and spend by department | Not included | Not included | Yes |
| SaaS spend and idle seats | Not included | Not included | Yes |
| Security and audit | |||
| Audit trail of who did what | Yes | Yes | Yes |
| Reports on demand | Yes | Yes | Yes |
| Compliance hub and evidence export | Not included | Not included | Yes |
| Cloud account mapping | Not included | Not included | Yes |
| Security self-audit | Not included | Not included | Yes |
| Your instance | |||
| Backups and the System Health screen | Yes | Yes | Yes |
| Private local AI | Yes | Yes | Yes |
Where You See Your Own Plan
- In the app. System → License & Entitlements names your plan and lists each feature with its state. The guide is Read your license and plan screen.
- On a reference page. A page about one part of the product carries an “Included in” line beside the word Reference at its top, taken from the table above.
- On a guide. Each task guide shows a Plan label under its title.
How A Plan Reaches Your Instance
Your instance does not decide its own plan. At each license check-in (the heartbeat) the Zonitix licensing service answers with your plan and its entitlements: one on/off flag for each part of the product that does not come with every plan. Most parts that every plan includes have no flag; the Report Engine has one that is on in every plan. The check-in is described in Heartbeat (License Check-In), and the calls that read the result in License Administration.
Where This Table Comes From
The table is not written by hand. The plan each row starts on and the prices are read from the same data as the Zonitix pricing page, so they cannot differ.
If something here is not working as you expect, start with When something goes wrong.
The plain explanation is above. This part is for IT and developers: the exact settings, permission names, API addresses and data fields behind it. Closed: select the heading above to open it. While it is closed, your browser’s find-on-page (Ctrl+F or Cmd+F) does not search this part.
What A Call Outside Your Plan Returns
The flags are enforced on the server, not only in the menu. A request to a part of the product your plan does not include is refused with the status code 403 and "error": "License Required". That is a different answer from 402 with "error": "Subscription lapsed", which means the subscription has lapsed and paid modules are paused; it is returned before the plan is looked at. See What Happens When A Subscription Lapses.