Pay-as-you-go $7/user/month paid annually. Product page also offers a free plan for teams under 50 users; paid product remains distinct from open-source connector software. Source
Cloudflare Access vs NetBird Community Edition
Fit:
Migration notes
Scope is remote private-network access through NetBird clients and access policies. Rebuild enrolment and resource rules and operate infrastructure. Cloudflare clientless application access, browser terminals and broader SASE services need separate evaluation; no full platform replacement claim.
Sources: www.cloudflare.com, docs.netbird.io, docs.netbird.io · checked 2026-10-21
Cloudflare AccessPaid incumbent
| Free Plan | entry | Free |
|---|---|---|
| Pay-as-you-go | business | USD 84 / user / yr |
| Contract Plan | enterprise | Quote only |
NetBird Community EditionOpen-source alternative
| Community Edition | self-hosted community core | Free |
|---|---|---|
| Business | vendor commercial cloud | USD 12 / active cloud user / mo |
| Enterprise Commercial License | paid self-hosted enterprise licensing | Quote only |
What you may give up
- Enterprise Commercial License: active-active HA, SCIM provisioning, EDR/MDM integration, traffic-flow logging/streaming, peer approval, audit-event streaming and notifications.
- Self-hosters operate control plane and relays; hosting and relay bandwidth have infrastructure costs.
- MSP multi-tenant management is cloud-only.
Tier B: OSI community code: root BSD-3-Clause excludes management, signal, relay and combined directories licensed AGPLv3. Core connectivity/access control/routing remain community features; documented enterprise administration, approval and observability gates warrant B. NetBird Cloud tiers are separate from self-hosted Enterprise licensing. License source
What running it takes
-
- Combined netbird-server (management, signal, relay, STUN) plus dashboard
- Traefik or existing supported HTTPS reverse proxy
Hover or focus an icon for its name. Dashed means not established; struck through means no; grouped icons are alternatives.
Current combined setup, not older mandatory external IdP/Coturn multi-container instructions. Public domain and TCP80/443, UDP3478 required. SMTP not established as baseline dependency. Infrastructure and staff time are not priced here; this page does not compare total cost.