One price per site.

Run Lantern two ways: as a hosted portal with a collector at each client site, or as an appliance on your own hardware. Self-hosted includes every feature today. The cloud portal is in early access and gains features as each one is released. Prices are in US dollars and exclude applicable taxes.

Many sites, or more than 250 network devices at a site? Request a volume discount

What is a site?
One client network, monitored by one collector (cloud) or one appliance (self-hosted). Locations joined by your WAN and watched by one collector count as one site.
How many sites?
Choose 1 to 100 sites when you sign up; more by quote. Change the number later in your account. Changes are invoiced at once: adding sites charges the difference for the rest of the period, and removing sites gives a credit on later invoices, not a refund.
Fair use
Up to 250 network devices (switches, routers, firewalls and access points) per site. Above that we contact you first, and there is no automatic charge for extra devices. We may then ask you to add sites or agree a custom plan.
Billing and renewal
Charged when you subscribe, then at the start of each month or year at the price then in effect, until you cancel. Annual plans are paid for the year up front. Prices exclude applicable taxes. We give 30 days’ notice by email of a price change. Card details go to Stripe, never to us.
Cancelling and refunds
Cancel any time in your account. Cancellation takes effect at the end of the period you have paid for, and you keep the service until then. Payments are non-refundable except as the refund policy says.
When a cloud plan ends
The portal stays read-only for 30 days, and we send you a copy of its data if you ask. Then it is deleted. Data on your collectors stays with you.

Cloud or self-hosted?

Loop detection and backups run on site in both. In the cloud plan, the hosted map and change history are in early access and arrive as they are released. Neither changes a device on its own. The difference is where things run and where data lives.

QuestionCloud Early accessSelf-hosted
Who runs itWe host the portal for you.You run the appliance on your own Windows or Linux machine.
At each siteA small collector polls devices, receives syslog and flows, and runs backups.The appliance does everything: polling, storage and the web UI.
Where you sign inOne portal at yourname.lanternnms.com for all your clients, once portal sign-in opens.Each appliance at its own address on your network.
Stays on siteRaw logs, raw flows, configuration backups and their history, and device credentials stay on the collector.Everything stays on the appliance. Nothing is sent to us.
In the cloudPlanned for the cloud portal: the map, inventory, alerts, log findings, traffic summaries and 24 hours of graphs, with older history fetched from the collector. Configuration changes will appear as who, when and how many lines, never the configuration itself. Built so far: device inventory, which you see once sign-in and collector connection open. Coming later: an encrypted backup of each collector’s settings that only you can open.Nothing.
ConnectionEach collector connects out on port 443 (TLS), once collector connection opens. No port forwarding, VPN or static IP. If the link drops, the collector keeps monitoring on site. TLS inspection must exempt collect.lanternnms.com.No internet connection needed, apart from the services you connect, such as your identity provider or email.
Sign-inWhen portal sign-in opens, the first administrator is set up from an emailed link, then adds local accounts. Single sign-on, starting with Microsoft Entra ID, is planned.Local accounts, Active Directory or LDAP, Entra ID, Google Workspace, Okta or another standard OpenID Connect provider (single sign-on tested so far against a stand-in provider).
UpdatesWe keep the portal up to date.Included. You install them when it suits you.

More in the FAQ and how Lantern protects your devices and credentials. Want to see it first? Request a demo.