NextPKI
Pricing

One number per plan.
Counted in domains, not certificates.

Discovery stays free. Automated renewal starts at 199 EUR a month. No fee per certificate, no charge per seat, and no sales call before you know the number.

Free

See the estate you already have.

0 EUR
25 domains
  • Network discovery and full inventory
  • Certificate Transparency monitoring
  • Expiry alerts by email
  • Unlimited operator seats
Request access
Most teams start here

Pro

Stop renewing by hand.

199 EUR / month
250 domains · 1,990 EUR per year, two months free
  • Everything in Free, plus:
  • Automated renewal across your CAs
  • Alert escalation, Teams and Slack webhooks
  • SAML single sign-on and granular roles
  • Inventory and audit-log export
Request access

Business

Several entities, one view.

1,490 EUR / month
2,500 domains · 14,900 EUR per year, two months free
  • Everything in Pro, plus:
  • Organisation hierarchy, one tenant per entity
  • Purchase by invoice with payment terms
  • Named technical contact
Talk to us

Enterprise

Regulated, audited, contractual.

Individual
No domain limit
  • Everything in Business, plus:
  • Individual DPA terms and security review
  • Multi-year agreements
  • Support terms agreed in writing
Talk to us

All prices exclude VAT and are billed in EUR. Monthly or annual; annual pays ten months for twelve. Card and SEPA direct debit for Free and Pro; Business and Enterprise are invoiced with payment terms.

What we count, and what we never will.

  • No per-certificate fee for discovered certs.

    You should not pay more to see your problem. The plan counts domains you monitor, never certificates we find. Discovery is in every tier, including Free.

  • No surprise per-seat charges.

    Unlimited operator seats inside your organisation, on every plan. Add the whole team without re-reading the contract. Sensors are not metered either.

  • Volume discounts pass through.

    Whatever tier pricing we negotiate with a CA goes to you. We mark up the platform, not the certificates.

  • A billing problem never expires a certificate.

    If a payment fails, you keep a two-week grace period with a warning first. Expiry alerts stay switched on in every plan and in every payment state, because a silent outage is worse than an unpaid invoice.

Questions procurement asks first.

What happens when we outgrow the domain limit?
You cannot add new domains, and the console tells you so with an upgrade path. Nothing already monitored disappears, and its alerts keep running.
Can we buy on invoice?
Business and Enterprise are invoiced with payment terms, including your PO number and VAT ID on the invoice. Free and Pro are paid by card or SEPA direct debit.
Where does our data live?
Certificate and inventory data stay in the EU region you choose. Payment data is held by our payment processor and never mixes with the PKI data. Details are in the DPA.
How do we cancel?
At the end of the running period, from the console, without contacting us. Your inventory stays exportable until the period ends. The terms are in the terms of service.

See the estate before you pick a plan.

The discovery scan runs on Free. Most teams find certificates nobody knew about, and only then does the plan question get easy to answer.

Request access How discovery works