Transparent Pricing.
No Per-Certificate Surprises.

An active device certificate is any X.509 device certificate that is currently valid (not expired or revoked) and tracked by ErlySign. Expired and revoked certificates do not count toward your tier limit. You can have more historical certificates than your tier limit — only the currently-active ones count.

The free trial gives you full access to your chosen tier (Starter or Growth) for 14 days. You can provision up to 100 devices at no cost. No credit card required to start. At the end of the trial, you can choose to continue with a paid subscription or export your configuration and certificate data.

Yes. You can upgrade from Starter to Growth at any time. The upgrade is effective immediately, and billing is prorated for the remainder of the month. Downgrading is also possible but requires that your active device count falls within the lower tier's limit.

No. ErlySign charges by active device count, not per certificate issuance or renewal event. You can renew a certificate as many times as needed within your tier without additional charges. This is a deliberate architectural decision — per-cert pricing creates perverse incentives against renewal frequency.

Enterprise customers can deploy ErlySign's CA infrastructure within their own private cloud or on-premise environment. This is appropriate for customers with air-gapped manufacturing lines, IEC 62443 site requirements that restrict external CA dependencies, or procurement policies mandating CA sovereignty within the customer's own HSM boundary. Contact sales for architecture details and deployment scope.

The Request Pilot CTA is aimed at teams wanting to evaluate ErlySign against real hardware before committing to a subscription. We provision your first 100 devices, help configure your CA hierarchy, and provide a 1-hour integration architecture session with our engineering team — at no cost. This is not a time-limited trial; the pilot devices remain active on your account.