Deploy, patch, and govern software on every Mac.

No. Create a workspace and you're on Team — free, with no device or user limits. You only make a buying decision when you hit a real need, and you can turn upgrades on from inside Workbrew.

No. You can enroll your whole fleet on Team without giving us a card. You add one when you turn on an upgrade or move to Business.

Plans — Team, Business, Enterprise — are how you buy, and you're on exactly one. Upgrades — Vulnerability Patching and Governance — switch on inside the free Team plan when a specific need shows up, priced per device. Business and Enterprise include both.

Yes. Upgrades are cumulative: Governance includes everything in Vulnerability Patching, so you never buy them separately or worry about combining them.

Every device enrolled in your workspace — the count on your Devices page. We reconcile that with your subscription twice a day, so your bill tracks your fleet without you doing anything. A device leaves the count when you remove it in the console; one that has simply stopped checking in still counts until you do. There's no charge for people, only devices, so adding admins or viewers costs nothing.

No. Upgrades apply to your whole workspace, so the price covers every device you have enrolled. What you can vary is how the capability behaves: on Team you target a policy at your whole fleet or at a single device, and Business adds device groups, so patching thresholds and policies can differ from one team to the next.

Adding devices charges a pro-rated amount for the rest of the billing period, so a device that joins halfway through costs half a month. Removing devices lowers your count from the next invoice onward, without a refund for the part of the period you have already paid for. Either way there is nothing to do at your end.

Pay for a year up front and save 10% on every paid plan and upgrade. With the toggle set to annual, the prices on this page show the effective monthly rate.

Business is card only, through self-serve checkout. Enterprise is invoiced, with the terms and purchase order your finance team needs.

Anytime. Upgrades switch on and off from inside Workbrew, moving up to Business is self-serve, and downgrading never locks you out of your data.

Pro workspaces move to Team + Governance and keep the device-group targeting they had on Pro, at their current rate. You lose nothing, and gain app allowlist policies.