CyberQP Pricing
CyberQP offers two types of licenses—technician and workstation—with identical capabilities including discovery, remediation, zero-knowledge vault and credential rotation, just-in-time and passwordless MFA access, and high-risk activity alerting, where technician licenses cover operators and servers they manage without per-client fees or platform charges, and pricing is customized based on the environment with no minimum headcount or device requirements.
PRICING
Two licenses. Point them where you need them.
The capabilities are the same under either license. Which license you need depends on what you're pointing them at — and you can buy either one on its own.
Nothing you add consumes a license until you assign one
Deploy the endpoint client everywhere, connect your directories, take a full inventory
No platform fee, no per-client fee, no charge for the AI
The multi-tenant console, integrations and the Prompt Terminal come with the licenses
The monthly minimum is a dollar amount, not a headcount
No minimum number of technicians, workstations or clients
Request pricing
Tell us about your environment and we'll come back with a quote for your seat mix.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
First Name *
Last Name *
Email *
Phone *
Company
reCAPTCHA
Recaptcha requires verification.
I'm not a robot
reCAPTCHA
Comments
reCAPTCHA
The two licenses
The same capabilities, aimed at two different places
One per technician, one per workstation. Buy either on its own, or both in whatever mix your environment needs.
Capabilities · the same set, either license
Discovery & remediation
Zero-knowledge vault
Zero-knowledge credential rotation
Just-in-time access
Passwordless, MFA-enforced access
Alerting on high-risk activity
Endpoint privilege and elevationDevice only
Per technician
Technician license
Your operators, and everything they administer. One seat works across every client environment you support.
Centralized identity providers & servers
Active DirectoryEntra IDGoogle WorkspaceServers
A server is a machine only your technicians touch, so it sits with the technician license. The endpoint client runs on servers without consuming a device license.
Per workstation
Device license
The workstations your end users work on. Applied to the machines you're managing privilege on.
Workstations
WindowsmacOS
Your technicians don't need a paid license to work on a licensed workstation — they just need a login.
Three ways to buy
Device licenses only
Secure your clients' workstations.
Productize endpoint privilege as a service. Your technicians just need a login.
Technician licenses only
Secure privileged access first.
Servers, directories and cloud identity, without licensing a single workstation.
Both
Every privileged account you have.
Servers, directories and workstations in one platform — and combined spend earns a better rate.
HOW LICENSES GET ASSIGNED
Install, inventory, then decide what to license
Three phases. The meter only moves in the third one. Step through them and watch a sample tenant.
01InstallDeploy the endpoint client into a tenant. No license required. 02Discover & inventoryPanthera inventories every technician, server and workstation across every client. No licenses consumed. 03Assign licensesYou choose which technicians and devices get a license. That is the moment a license is consumed.
panthera — licensing · meridian group
endpoint client deployed · 4 min ago
Technicians on your account—
Machines discovered—
Servers — technician license—
Workstations — device license—
Technicians licensed12 of 26
Workstations licensed340 of 872
Billable licenses
0
technician licenses
0
device licenses
No licenses assigned yet. Technicians and devices in the platform don't consume a license until one is applied.
Licenses can be added at any time. Reductions take effect at renewal.
WHAT NEVER CONSUMES A LICENSE
You can prove the problem before you pay for the fix
Deploy across every client, inventory everything, and design your policies with nothing licensed. A license is what lets you act on what you find.
Discovery on every client
Install the endpoint client, connect your directories, and inventory every privileged identity across servers, workstations, Active Directory, Entra ID and Google Workspace. No license consumed, no cap.
Policies staged before you assign
Build your just-in-time policies, approval workflows, rotation schedules and elevation rules with nothing licensed. Configuration never consumes a license — assigning one is what lets any of it execute.
Vault access isn't licensed
Read access never consumes a license, so you're not buying seats for people who only need to look something up. Feeding the vault and acting on the environment are what a license gates.
FAQ
Questions
If yours is not here, ask it on the pricing request and we will answer it in writing.
Which license do I need
One per technician, one per workstation. The technician license covers your operators and everything they administer — servers, Active Directory, Entra ID, Google Workspace. The device license covers the workstations your end users work on. Buy either on its own, or both.
I just want to secure my clients' workstations. What do I need?
Device licenses only. License the machines you're managing privilege on and you get endpoint privilege and elevation, local credential rotation, just-in-time access to the machine, and discovery and remediation. Your technicians don't need a paid license for any of it — they just need a login.
I just want to lock down privileged access to servers and directories. What do I need?
Technician licenses only. That covers servers, Active Directory, Entra ID and Google Workspace: rotation, just-in-time access, passwordless MFA-enforced login, vaulting, discovery and remediation. You can still deploy the endpoint client to workstations for inventory without licensing a single one.
Buy both, in whatever mix your environment needs. Your discount follows your total monthly spend, so putting both licenses on one agreement works in your favor rather than splitting your volume across two.
Do servers need a device license?
No. A server is a machine only your technicians touch, so it sits with the technician license. The endpoint client runs on servers without consuming a device license.
What costs what
What's free, and what needs a license?
Deploy the endpoint client everywhere, connect your directories, discover every privileged identity across every client, take a full inventory, stage your policies, and read the vault — none of it consumes a license. A license is what lets you act on what you find.
Your subscription begins with your agreement: you commit to a minimum monthly spend, in any mix of license types, and that buys your license pool. Above that commitment, nothing new is charged until a license is assigned and the technician or device is actually using it. Creating a technician login or installing the endpoint client doesn't consume a license on its own.
Can one of my technicians run up the bill?
No. Assigning a license takes an Owner or Super User. A technician who needs a licensed action can request a license and carry on with everything else while it's approved — they can't commit the spend themselves.
Is there a platform fee or a per-client fee?
No. A platform fee is a charge just to access the platform, with every technician and device license extra on top. Our minimum monthly commitment is satisfied by the licenses themselves, in any mix you choose — there's no separate charge for access, no per-client fee, and no charge for the AI. Onboard a ten-seat client the same way you onboard a thousand-seat one.
No. The Prompt Terminal is included with both license types — no separate module, no per-token charge, no credit pack. We run our own fine-tuned model on our own infrastructure, so there's no third-party inference bill to pass on to you.
Terms
There's a minimum monthly commitment, and it's a dollar amount rather than a license count. No minimum number of technicians, workstations or clients. Any mix that clears it works.
Your discount follows your total monthly spend rather than the count of any single license type. As your spend grows you move into a higher partner tier, and the improved rate applies to your licenses. Ask us where the thresholds fall and we'll show you in the quote.
In the product. Your initial agreement sets your commitment and your discount; after that you add paid licenses yourself without coming back to sales for each one.
Can we reduce licenses mid-term?
Not mid-term. Once a paid license is added you're committed to it through the end of your current agreement. Renewal is where the number can come down.
It runs on your own environment — your tenants, your identities, your stack — with our team helping you scope it and stand it up. Discovery runs first, so you see your real privileged-access position before deciding anything, and nothing is feature-gated during the trial. To continue afterward you'll sign an agreement, which is where your commitment and your discount get set. A trial and an unassigned license are two different things: the trial is a one-time evaluation before you sign, and unassigned licenses stay unbilled for as long as you're a customer.
Run Panthera on your own environment
Quote built from your counts
No published price list
Products
Pricing QGuard QDesk Integrations Product Tours Product Roadmap Release Notes
Products
Submit a Ticket Partner Portal Trust Center Knowledge Base
Company
Company Leadership Contact Careers
Resources
Resource Hub Blog White Papers eBooks Webinars Success Stories
© 2026 CyberQP Inc. All rights reserved.
Privacy Policy Terms & Conditions Cookie Policy Consent Preferences