- Plans & Pricing
Pick the protection your team needs.
One lightweight KiteCyber agent covers your devices, web, data and AI. Choose a plan, then snap on Zero Trust access or an AI agent for IT & Security.
- UEM Device Shield
- SWG App & User Shield
- DLP Data Shield
- ZTNA Infra Shield
Starter
Starter
Device management and audit-ready compliance for the whole workplace. Simplified cybersecurity for SMBs
$80 /user/yr billed annually
UEM · Device Shield
- Cross-platform device enrollment (Windows, macOS, Linux)
- Real-time device inventory and asset tracking
- Onboarding, offboarding, remote lock & wipe
- MDM for iOS & Android, remote scripts
- IAM integration (AD, SSO, MFA)
Compliance pack
- Compliance automation & reporting
- SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS & more
- Integration with GRC tools
Most popular
Pro
Comprehensive Data, Device & App Security, the everyday protection stack.
Best for growing companies.
$120 /user/yr billed annually
UEM core · Device Shield
- Device enrollment, inventory & compliance policies
DLP · Data Shield
- Endpoint DLP: discovery, classification, USB/device control
- Data lineage tracking & exfiltration alerts
- Network DLP, upload/download control
SWG · App & User Shield
- URL & web content filtering
- SaaS & Gen AI app discovery, classification & control
- Phishing & identity-theft prevention
Enterprise
Enterprise
The full platform plus AI Security, governance for Gen AI and agents.
Best for enterprises adopting AI.
$250 /user/yr billed annually
Everything in Pro, plus
- Full UEM + SWG + DLP (endpoint & network)
AI Security
- Gen AI app governance & shadow-AI discovery
- Control what AI agents can touch & move on endpoints
- Block sensitive data into prompts & uploads
Enterprise controls
- Patch management & vulnerability remediation
- UEBA & enterprise support (4-hour SLA)
Starter
Starter
Device management and audit-ready compliance for the whole workplace. Simplified cybersecurity for SMBs
$8 /user/mo
billed monthly
UEM · Device Shield
- Cross-platform device enrollment (Windows, macOS, Linux)
- Real-time device inventory and asset tracking
- Onboarding, offboarding, remote lock & wipe
- MDM for iOS & Android, remote scripts
- IAM integration (AD, SSO, MFA)
Compliance pack
- Compliance automation & reporting
- SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS & more
- Integration with GRC tools
Most popular
Pro
Comprehensive Data, Device & App Security, the everyday protection stack.
Best for growing companies.
$15 /user/mo
billed monthly
UEM core · Device Shield
- Device enrollment, inventory & compliance policies
DLP · Data Shield
- Endpoint DLP: discovery, classification, USB/device control
- Data lineage tracking & exfiltration alerts
- Network DLP, upload/download control
SWG · App & User Shield
- URL & web content filtering
- SaaS & Gen AI app discovery, classification & control
- Phishing & identity-theft prevention
Enterprise
Enterprise
The full platform plus AI Security, governance for Gen AI and agents.
Best for enterprises adopting AI.
$25 /user/mo
billed monthly
Everything in Pro, plus
- Full UEM + SWG + DLP (endpoint & network)
AI Security
- Gen AI app governance & shadow-AI discovery
- Control what AI agents can touch & move on endpoints
- Block sensitive data into prompts & uploads
Enterprise controls
- Patch management & vulnerability remediation
- UEBA & enterprise support (4-hour SLA)
- Add-ons
Bolt either one onto any plan
Same single agent — no extra install. Add at quote or anytime later.
ZTNA · Infra Shield
+$70 /user/yr
Zero-trust access to cloud and on-prem apps — fast, passwordless, and built to retire your legacy VPN.
- Single- or multi-cloud + on-prem access
- Passwordless access based on device trust
- Just-in-time access with continuous verification
AI Agent for IT & Security
An AI teammate that automates IT and security work and answers questions from your own policies — fewer tickets, faster answers.
- AI agent for IT automation
- AI agent for security & compliance
- Instant answers across security, compliance & support
- Priced based on number of users
- Side by side
What’s in each bundle
Exactly which modules each bundle includes — so you can see the fit at a glance.
| Module | Starter | Pro | Enterprise |
|---|---|---|---|
UEM — device managementDevice Shield | |||
Compliance packSOC 2, ISO, HIPAA, GDPR, PCI & more | |||
SWG — web, SaaS & Gen AI controlApp & User Shield | |||
DLP — endpoint & networkData Shield | |||
AI SecurityGen AI & agent governance | |||
ZTNA — zero-trust accessInfra Shield | + Add-on | + Add-on | + Add-on |
AI Agent for IT & SecurityIT & security automation | + Add-on | + Add-on | + Add-on |
Included
Optional add-on
Not in plan
- Enterprise & partners
Need a custom enterprise package?
Get a tailored plan for larger teams, platform-wide deployments, multi-year agreements, partner-led rollouts, and advanced support needs.
- Volume pricing
- Multi-year agreements
- Advanced support & SLAs
- Platform-wide deployment
- Partner-led rollouts
- Custom bundles
- Fully Managed
Prefer we run it for you?
Complete IT, security and compliance as a service — all four modules, monitored and managed by Kitecyber experts, with vCISO and audit support.
- Fully Managed For You
We operate the entire platform for you — all four modules (UEM, SWG, ZTNA & DLP) on one agent, run by KiteCyber experts.
What's Included as Software
- Device Security (UEM)
- Data Security (DLP)
- Bundled EDR
- SaaS, Internet & Gen AI Security (SWG)
- Zero Trust Network Access (ZTNA)
- AI Agent for IT and Security
What our team handles for you
- Device & alert monitoring
- SLA-backed onboarding/offboarding
- Compliance automation & audit support
- vCISO, risk assessment & pen testing
- Module details
Every capability, in detail
The complete feature set behind each module — beyond what the plans above summarize.
Device Shield
UEM — Unified Endpoint Management
Enroll, secure and manage every device across
Windows, macOS, Linux, iOS & Android.
Starter
- Cross-platform device enrollment (Windows, macOS, Linux)
- Device onboarding & offboarding
- Real-time device inventory & asset tracking
- Remote lock & remote wipe
- Discover apps & browser extensions
- Compliance automation & reporting
- Integration with GRC tools
Pro
- Everything in Starter plan*
- USB control
- IAM integration (AD, SSO, MFA)
- Remote scripts (PowerShell, Bash)
- App deployment & updates (MAM)
- UEBA — user & entity behavior analytics
Enterprise
- Everything in Pro plan*
- Patch management & vulnerability remediation
- App distribution
- Application allowlist / blocklist
- MDM support (iOS & Android)
Data Shield
DLP — Data Loss Prevention
Discover, classify and protect sensitive data on
the endpoint and across the network.
the endpoint and across the network.
Pro
- Sensitive data discovery & classification
- Source code discovery
- Copy / paste alerts
- Device control (USB & external drives)
- Data exfiltration alerts
- Compliance & automation
- Compliance reporting (SOC 2, ISO 27001, PCI, HIPAA, GDPR)
- Upload / download alerts
Enterprise
- Everything in Pro plan*
- Sensitive data lineage tracking
- Block data transfer to unsanctioned SaaS & Gen AI apps
App & User Shield
SWG — Secure Web Gateway
Inspect web traffic and bring SaaS & Gen AI app
usage under policy.
Pro
- SaaS app discovery, classification & control
- Gen AI app discovery, classification & control
- Data-transfer metrics & reporting dashboard
- URL & web content filtering
- Group & user policy specifications
- Phishing & identity-theft prevention
Enterprise
- Everything in Pro plan*
- Separate Gen AI dashboard for AI security
- Geo-fencing
- SaaS cost optimization & management
Infra Shield
ZTNA — Zero Trust Network Access
Passwordless, least-privilege access to internal
apps — built to replace VPN.
apps — built to replace VPN.
- Secure access to single-cloud + on-prem
- Just-in-time access with continuous identity verification
- Multi-OS support (Mac, Windows, Linux)
- Low latency access
- Passwordless access based on device trust
Questions
Pricing FAQ
Pricing is per user, per month, billed annually. You can buy any individual module, combine several, or pick a bundle for a built-in discount. Everything runs on one lightweight agent, so adding modules later doesn’t mean another deployment.
If you have a single need, buy that module. If you’re solving a broader goal, a bundle is cheaper: choose Gen AI & Agent Security to roll out AI safely, Data Security to protect data and meet compliance, or the Complete Platform to replace several tools at once.
Pro covers the core capabilities of each module. Enterprise adds advanced controls — patch management and app deployment for UEM, geo-fencing and SaaS cost optimization for SWG, compliance reporting and automation for DLP, multi-cloud and on-prem access for ZTNA — plus a 4-hour SLA on critical issues. Use the toggle above to see prices for each tier.
UEM Core provides device inventory, compliance posture and basic enforcement — enough to anchor your data and web policies to a trusted device. It doesn’t include full device lifecycle management, MDM provisioning or patch management. Upgrade to the Gen AI or Complete bundle (or add the full UEM module) for those.
It’s the AI-specific layer on top of SWG and DLP: shadow-AI discovery, sanctioned/unsanctioned AI controls, prompt-level data protection (paste & upload), OAuth/agent governance, and AI usage analytics. It’s included in Gen AI & Agent Security and the Complete Platform, and available as an add-on to other plans.
Yes. ZTNA is included in the Complete Platform and can be added to the Gen AI or Data Security bundle as an add-on. Talk to us for add-on pricing.
The two AI Agents are usage-based add-ons you can attach to any module or bundle. Each has a small access fee — AskCISO Agent per user, Admin Copilot per admin — that includes a monthly allowance of usage. Beyond the allowance, you buy more in simple packs. You’re billed in plain-English units (resolutions and actions), never in raw tokens.
A resolution is one completed Q&A interaction with the AskCISO Agent — an employee asks a question and gets an answer. An action is one query or task run by the Admin Copilot, such as pulling an org-level report or executing a change. These map to your token usage behind the scenes, but you only ever see whole units.
Yes — you can start a free trial and deploy the agent in your own environment before you buy. Start free trial.
