Plans and billing
NoCert sells two plans in the app, Pro and Business. Both carry the same certificate volume and the same unlimited Sentinels, and what separates them is mostly features rather than size.
Current prices are on the pricing page, in euros or US dollars, monthly or annual. Prices exclude VAT, which is applied at checkout from your billing country and the VAT number you give there.
What both plans include
Section titled “What both plans include”- 50 active certificates, then per-certificate billing above that.
- Unlimited Sentinels.
- Expiry alerting, with email, Slack, Teams and Discord delivery.
- 12 months of activity history.
What Business adds
Section titled “What Business adds”- The compliance workspace: the failing check, the assets it affects, evidence and remediation, accepted risks, CSV exports.
- Single sign-on.
- Roles. On Pro every member you add is an operator; assigning the viewer role, and restricting a viewer to certain tags, needs Business.
- Twenty local accounts and twenty notification rules, against ten of each on Pro. That is the one place the two plans differ in size.
Need more, or an invoice rather than a card? Contact us about the Custom plan. It is not purchasable in the app.
How certificates are counted
Section titled “How certificates are counted”A certificate is active when NoCert has seen it deployed in the last six days, on an endpoint, on disk, or in a Kubernetes secret. CA certificates never count.
Counting is per certificate, not per place it sits. One wildcard on forty hosts, in a file and in a Kubernetes secret, is one active certificate.
Two consequences:
- Decommissioning a certificate does not stop the billing immediately. It leaves the count once it has been silent for six days.
- A certificate you upload but that is never observed anywhere does not count at all.
Excluding a certificate from the inventory takes it out of the count straight away, which is the lever for something you will never decommission but do not want to pay for. See Certificates.
Going over 50 does not block anything. Discovery, scanning and alerting carry on, the additional certificates appear on your usage invoice, and NoCert emails the owners when the count crosses the included volume, at most once a day. Settings → Billing shows the current count, the included volume, and the estimated overage.
On annual billing the base fee is charged yearly and the additional certificates monthly, since usage is metered per month.
Changing plan
Section titled “Changing plan”Owners can subscribe and change plan from Settings → Billing. Nobody else sees the billing screen.
Subscribing ends the trial and starts billing immediately.
When payment fails
Section titled “When payment fails”NoCert does not cut your access when a payment fails. You get a banner asking you to update the payment method, and monitoring keeps running while Stripe retries.
Cancelling keeps the subscription live until the end of the period you have paid for. After that the organization goes read-only, the same state as an expired trial: you can read and export, but not change anything, and monitoring stops.