Skip to content
ToolGPA

The Firezone Insider’s Guide

Everything we know about Firezone in one document: what it costs, its grades, getting a refund, getting help and what else to look at. Read it here, or keep a copy.

Download the PDF
Pass it onEmailLinkedInXWhatsApp
ToolGPANovember 2026

Firezone

The Insider’s Guide

WireGuard-based zero-trust remote access for teams

Firezone, as pictured on firezone.dev

Every plan, grade, refund rule and rival among VPNs, read from Firezone’s own pages.

Made by Firezone · checked Nov 13, 2026 · toolgpa.com

2.6GPA

Contents

  1. 01WelcomeWhat it is, who it suits, its grades and the ten things to know first
  2. 02What it costsEvery plan, the free plan, ways to pay less and how prices have moved
  3. 03What it doesIts main features, where it runs, what it works with and who makes it
  4. 04Where it standsIts grades against its category, and whether to keep it or make your own
  5. 05The alternativesThe tools it is most often weighed against, side by side
  6. 06Quick answersThe questions people ask about it, each answered in a line or two
  7. 07About ToolGPAWho made this guide, what else is on the site, and how to cite it

ToolGPA put this guide together from Firezone’s own pages, its app-store listings and our grades. Every fact in it is on Firezone’s page too, where it is kept up to date. Checked Nov 13, 2026.

Part 01 · Overview

Welcome

What it is, who it suits, its grades and the ten things to know first

2.6

GPA, above 31 of the 50 other VPNs we grade

Firezone is a remote-access product for teams that builds on WireGuard and replaces a traditional VPN with identity-based access to servers and apps. Gateways make only outbound connections, access is tied to an identity provider, and policies can check device and location conditions. The code is on GitHub under an Apache-2.0 license.

To get you started, here are 9 things to know about Firezone, taken from its own pages and our grades.

You connect an identity provider, gateways and policies before anyone can use it.
From our grade for ease of use
  1. 1

    Best for identity-based access to servers for small teams

    Firezone builds on WireGuard so a team can reach servers and apps through its identity provider, with outbound-only gateways.

  2. 2

    Paid plans start at $4.17 a month when paid by the year for each person

    As its pricing page puts it: $50 per seat / year ($5 per seat / month billed monthly).

  3. 3

    There is a free plan

    Starter plan: free for up to 6 users and 10 service accounts, no credit card required.

  4. 4

    It runs on 5 platforms

    macOS, Windows, Linux, iOS and Android.

  5. 5

    WireGuard with a Rust data plane

    The site says it combines WireGuard with a Rust data plane tuned per operating system, and lists throughput figures from 2 Gbps on mobile to 7 Gbps and up on Linux, as tested.

  6. 6

    Outbound-only gateways

    Gateways only make outbound connections and never listen for traffic from the internet, so no firewall ports are opened.

  7. 7

    Identity-provider sync

    Syncs users and groups from Okta, Entra ID and Google Workspace on Business, so deactivating a person there signs them out of every device.

  8. 8

    A 2.6 GPA, above 31 of 50

    That is against the other VPNs we grade, on value, the free plan, features, ease of use and platforms.

  9. 9

    Keep it

    To replace Firezone you would be making servers in dozens of countries, kept fast and private. That is not a weekend's work, with an AI app builder or without one.

Firezone at a glance

Pricing
Free plan, from $50 per seat / year ($5 per seat / month billed monthly)
Free plan
Yes
Free trial
30-day trial of Enterprise on request through sales.
Runs on
macOS, Windows, Linux, iOS, Android
Made by
Firezone
Category
VPNs
Our grade
2.6 GPA, good

The report card

Best for identity-based access to servers for small teams

Firezone builds on WireGuard so a team can reach servers and apps through its identity provider, with outbound-only gateways. The free Starter plan stops at 6 users, and directory sync and device posture checks need Business at $80 a seat a year.

ToolGPA report cardFirezoneGraded Nov 13, 2026
SubjectGradeComment
Value for moneyCTeam is $50 a seat a year, about $4.17 a month, in the middle of a category that runs $3.99 to $8. Business is $80 a seat a year.
Free plan and trialBStarter is free for 6 users and 10 service accounts with no card. A very small team could live on it.
FeaturesCWireGuard with outbound-only gateways, identity sign-in, resource policies and audit logs. The gaps: directory sync and device posture checks are Business only, and production self-hosting is not officially supported.
Ease of useCNo rating on record. You connect an identity provider, gateways and policies before anyone can use it.
Platforms and integrationsAMac, Windows, Linux, iPhone and Android clients, a REST API, and links to Okta, Entra ID, Google Workspace, Intune, Splunk and Datadog.
Grade point averageGood, out of 4.02.6

An A is worth 4 points, a B 3, a C 2, a D 1 and an F nothing. The GPA is the average of the five.

Who Firezone is for

  • Fits if you are a team of 6 or fewer that wants access tied to a sign-in
  • Works for teams that already use Okta, Entra ID or Google Workspace

Who it is not for

  • Tight if you grow past 6 users, 10 service accounts or, on Team, 500 users
  • Pricey if you need directory sync or device posture checks, which are on Business at $80 a seat a year
  • Skip it if you want to self-host for production, because the GitHub page says that is not officially supported
  • Watch out: the Enterprise trial is 30 days and only on request through sales
  • Watch out: prices are for Firezone Cloud US, in dollars, with an EU region announced

Good to know

Good for

  • Small teams and homelabs on the free plan for up to 6 users
  • IT teams replacing a legacy VPN with identity-based access
  • Companies that need device checks before granting access

Worth knowing

  • Starter is capped at 6 users and 10 service accounts; Team at 500 users.
  • Directory sync and device posture checks need Business at $80 per seat / year.
  • The GitHub page says production self-hosting is not officially supported; Firezone Cloud is the supported way to run it.
  • Prices are for Firezone Cloud US, in US dollars; a Cloud EU region was announced on the pricing page.

Part 02 · Pricing

What it costs

Every plan, the free plan, ways to pay less and how prices have moved

$4.17

A month to start, paid by the year, for each person. There is a free plan too

Firezone has a free plan. Paid plans start at $50 per seat / year ($5 per seat / month billed monthly).

  • Starter

    $0

    Up to 6 users and 10 service accounts, native clients, email and OpenID Connect sign-in, resource-level policies, audit logs, a REST API and community support.

  • Team

    $50

    per seat / year ($5 per seat / month billed monthly)

    Up to 500 users, full-tunnel routing, conditional access policies, a custom account slug and priority email support. Self-serve, no contract.

  • Business

    $80

    per seat / year ($8 per seat / month billed monthly)

    Directory sync for Google, Entra ID and Okta, device posture checks, log sinks and SIEM integrations; up to 1,000 users, 200 service accounts, 200 sites. Per active seat.

  • Enterprise

    Custom

    Unlimited users, service accounts and sites, SOC 2 and pentest reports, a 99.9% uptime SLA, dedicated Slack or Teams support and white-glove onboarding.

The free plan

Starter plan: free for up to 6 users and 10 service accounts, no credit card required.

Trying it first

30-day trial of Enterprise on request through sales.

Read from firezone.dev on Nov 13, 2026.

Ways to pay less

  • Annual discount

    Save 17% with annual billing

    The pricing page shows $50 per seat a year for Team against $5 a month, and $80 against $8 for Business.

    Stated on firezone.dev

Part 03 · Features

What it does

Its main features, where it runs, what it works with and who makes it

5

Places it runs: macOS, Windows, Linux, iOS and Android

WireGuard-based zero-trust remote access for teams. Here is what it does, as its own site describes it, and what it covers: open source, public API, vPN.

WireGuard with outbound-only gateways, identity sign-in, resource policies and audit logs.
From our grade for features
WireGuard with a Rust data plane
The site says it combines WireGuard with a Rust data plane tuned per operating system, and lists throughput figures from 2 Gbps on mobile to 7 Gbps and up on Linux, as tested.
Outbound-only gateways
Gateways only make outbound connections and never listen for traffic from the internet, so no firewall ports are opened.
Identity-provider sync
Syncs users and groups from Okta, Entra ID and Google Workspace on Business, so deactivating a person there signs them out of every device.
Device trust and posture checks
Checks a device certificate from an MDM and can use checks such as disk encryption and OS version, drawn from over 380 parameters from supported MDM and EDR tools.
Conditional policies
Policies can require a sign-in provider, location or time of day before a group reaches a resource.

Where it runs

  • macOS
  • Windows
  • Linux
  • iOS
  • Android

What it works with

  • Okta
  • Entra ID
  • Google Workspace
  • Intune
  • Splunk
  • Datadog
  • Elastic

Firezone is made by Firezone.

Part 04 · Standing

Where it stands

Its grades against its category, and whether to keep it or make your own

31/50

Other VPNs it is graded above

Firezone's GPA of 2.6 is higher than 31 of the 50 other VPNs we grade, and level with 4.

It stands best on platforms and integrations (A, above 46 of 50) and worst on features (C, above 2).

Its paid plans start at $4.17 a month when paid by the year for each person, against a middle price of $4.99 for the category: 13 of the 40 others that charge start lower.

On features, ease of use and platforms it scores 2.7 out of 4. 3 tools score higher and cost less.

Each grade against the category

Every bar is all 51 VPNs we grade, cut by the letter each got. Firezone’s own letter is outlined.

  • CValue for moneyAbove 3 of 50
  • BFree plan and trialAbove 35 of 50
  • CFeaturesAbove 2 of 50
  • CEase of useAbove 6 of 50
  • APlatforms and integrationsAbove 46 of 50

Price against what you get

Each dot is one of 46 VPNs. Further left costs less; higher up scores better on features, ease of use and platforms. Firezone is the marked dot.

D1.0C2.0B3.0A4.0Free$1$2$5$10$20More for lessCosts more, scores moreCosts less, scores lessCosts more, scores lessFirezoneSpeedifyhide.meSoftEther VPNProton VPNSurfshark

What paid plans start at, a month (each step along is roughly double) →

Keep it, or make your own?

Whether this is something you could build for yourself with an AI app builder, and what you would give up.

Keep it

To replace Firezone you would be making servers in dozens of countries, kept fast and private. That is not a weekend's work, with an AI app builder or without one.

It costs $50 a year. Firezone is open source, so there is a third way: take its code and run it yourself.

What you could not

  • Servers in dozens of countries, kept fast and private.
  • Apps for macOS, Windows, Linux, iOS and Android that stay in step with each other.
  • It is priced for each person, which means accounts and billing for a team.
  • It plugs into other products, Okta, Entra ID and Google Workspace among them, and has an API.

What this rests on. Firezone’s listing: what it does, where it runs, what it plugs into and what it costs. It is a judgement about the kind of software this is. We have not built a replacement for it, and making your own means looking after it too. How we decide, and every tool’s verdict.

Part 05 · Alternatives

The alternatives

The tools it is most often weighed against, side by side

OpenVPN, WireGuard, NordLayer, SoftEther VPN and Outline VPN

The 5 tools Firezone is most often weighed against, with where each one differs from it.

Part 06 · Questions

Quick answers

The questions people ask about it, each answered in a line or two

13

Questions, each answered in a line or two

The short version of everything above, for when you only need the answer. Each one is told in full in its part of the guide.

Is Firezone free?

Firezone has a free plan. Starter plan: free for up to 6 users and 10 service accounts, no credit card required.

How much does Firezone cost?

Firezone lists 4 plans. Starter: $0.

What platforms does Firezone work on?

Firezone is available on macOS, Windows, Linux, iOS and Android.

Does Firezone offer any discounts?

Firezone publicly lists the following: Save 17% with annual billing.

Is Firezone open source?

Yes. Firezone is open source, according to its own site.

Does Firezone have an API?

Yes. Firezone offers a public API, according to its own site.

What does Firezone integrate with?

Firezone's listing names Okta, Entra ID, Google Workspace, Intune, Splunk, Datadog and Elastic.

Does Firezone have a free trial?

Yes. 30-day trial of Enterprise on request through sales.

Who makes Firezone?

Firezone is made by a company of the same name.

What are the alternatives to Firezone?

The closest alternatives to Firezone in our directory are OpenVPN, WireGuard, NordLayer, SoftEther VPN and Outline VPN.

How does Firezone compare with other VPNs?

Firezone's GPA of 2.6 is higher than 31 of the 50 other VPNs we grade, and level with 4.

Is Firezone good value for money?

ToolGPA grades Firezone C for value for money. Its paid plans start at $4.17 a month when paid by the year for each person, against a middle price of $4.99 for the category: 13 of the 40 others that charge start lower.

Could I make my own version of Firezone?

To replace Firezone you would be making servers in dozens of countries, kept fast and private.

Where this guide comes from

The prices, plans, platforms and features were read from Firezone’s own pages on Nov 13, 2026, and the grades were given on Nov 13, 2026. Graded from this listing, whose facts were read from Firezone's own pages on 13 November 2026. Not based on using the product, and shorter than our full reviews.

Every tool we list gets five grades, A to F, each with its reason, and a GPA that averages them. How each is decided is at toolgpa.com/grades. This guide is ToolGPA’s own work; it is not made, paid for or approved by Firezone. Prices change, so check firezone.dev before you buy.

Part 07 · About

About ToolGPA

Who made this guide, what else is on the site, and how to cite it

7,721

Tools graded, in 95 categories

ToolGPA grades software the way a school report grades a pupil: five subjects, a letter for each with the reason written beside it, and a GPA that averages them. Prices, plans and platforms are read from each maker’s own pages and dated, so you always know how fresh a figure is.

Every grade, review and ranking on ToolGPA is our own judgement. No company can pay for a grade or change one. Every tool on the site has a guide like this one, free to download and pass on. It all lives at toolgpa.com.

  • 7,721

    tools graded

  • 95

    categories

  • 739

    price changes on record

  • 579

    apps priced in 12 countries

What else is on toolgpa.com

Scan for the live page

Prices and grades as they are today

Quoting this guide?

Please name ToolGPA and link to the live page, so readers can check the figures for themselves:

ToolGPA, "Firezone: The Insider's Guide", checked Nov 13, 2026. https://toolgpa.com/tools/firezone

Know someone choosing between VPNs?

Send them this guide: toolgpa.com/tools/firezone/guide

ToolGPA elsewhere: youtube.com/@toolgpa

See our other guides

The best-graded VPNs after Firezone, each with an Insider's Guide of its own.

ToolGPA

Choosing software? Every tool graded, every price dated.

Compare tools at toolgpa.com ›

Everything in this guide is ToolGPA’s own summary of what Firezone’s pages, its app-store listings and public reviews said on the dates shown. Grades are our judgement under the rules at toolgpa.com/grades. Every grade, review and ranking on ToolGPA is our own judgement. No company can pay for a grade or change one. Firezone is a trademark of its owner, and this guide is not made, paid for or approved by Firezone. Prices and plans change: check firezone.dev before you buy.