Six editions, one appliance image. Start Community, grow to Signature. No feature rewrites, no data migrations — upgrade the license, the appliance keeps running.
| Feature | Community | Standard | Professional | Enterprise | Platinum | Signature |
|---|---|---|---|---|---|---|
| Annual price | Free | from $1.5K | from $12K | $300K | $500K | $1M+ |
| Max appliances (one license) | 1 | 3 | Unlimited | Unlimited | Unlimited | Unlimited |
| Firewall rule count | Unlimited | Unlimited | Unlimited | Unlimited | Unlimited | Unlimited |
| Stateful packet filter + NAT (nftables) | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| VPN (IPsec, WireGuard, OpenVPN, Tailscale, custom-SSL) | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| FRR routing (BGP / OSPF / static) | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| AI rule explanation ("why does rule X exist?") | Limited | Full | Full | Full | Full | Full |
| HA pair + state sync | Limited | Limited | Limited | Full — advanced state sync | Full — advanced state sync | Full — advanced state sync |
| Multi-site federation | — | — | — | ✓ | ✓ | ✓ |
| DEC SDNS cross-product link-up (paid add-on) 1 | — | — | Available | Available | Available | Available |
| Throughput target | 2 Gbps | 10 Gbps | 25 Gbps | 25 Gbps | 25 Gbps (40 target Q1 2027) | 25 Gbps (40 Q1 2027 / 100 Q3 2027) |
| Support channel | Community forum | Email, business hours | Email + chat, business hours | Email + live chat, business hours | 24/7 phone, live person | Dedicated team |
| Response SLA | — | Best-effort | Next business day | 24-hour (email) | 24-hour (any channel) | 6-hour |
| White-glove onboarding | — | — | — | — | ✓ | ✓ |
| Partial managed service / dedicated team | — | — | — | — | — | ✓ |
| Security hardening | Identical | Identical | Identical | Identical | Identical | Identical |
Notes. All editions ship identical security hardening — we do not paywall protection. The appliance image is the same across every edition; the license file gates capabilities, support channels, and managed-service options.
On HA and state sync. Community, Standard, and Professional include a limited HA + state-sync implementation suitable for small deployments and lab work. Enterprise and above add the advanced state-sync path — low-latency cross-node replication, session resume across failover, and the throughput headroom to hold sync at 25+ Gbps without lag.
1 DEC SDNS cross-product link-up is a paid add-on SKU that enables an AI Quorum between two DEC-LLC core products — multi-product AI agents reaching consensus on coordinated actions across your infrastructure. Priced at $3K / yr per link-up between two products, or $15K / yr for the full bundle (all 6 links among OpenUTM / IVMIA / NIVMIA / VaultSync). Requires Professional tier or higher on both products in the link-up. Not available at Community or Standard. Why a fee: SDNS pricing underwrites the cyber / IT / business-E&O insurance coverage DEC-LLC carries for cross-product orchestration — coordinated action carries liability, and the fee funds the insurance that covers it.
Every DEC-LLC product starts free. Scale when you outgrow it. Keep what you built.