Endpoint protection priced per device rather than per user

If you’re looking for endpoint protection priced per device rather than per user, CrowdStrike currently lists its Falcon plans with per-device pricing: Falcon Go starts at $7.99 per device/month with annual billing available too. (crowdstrike.com)

Other vendors also use endpoint-based licensing—for example, WatchGuard says its Endpoint Security products are licensed for each endpoint. (watchguard.com)

Tell me how many devices you need to cover and whether you want basic antivirus, EDR, or managed detection and response, and I can narrow down suitable options.

Per-device licensing charges for each endpoint (laptop, desktop, or server) rather than for each person. Most vendors sell per user, so per-device is the exception, and it usually fits a specific kind of environment.

Where per-device pricing shows up

• Servers: Sophos licenses its server protection per device (server), while its endpoint product is mostly per user. For server protection, for example, Sophos Endpoint for Server / XDR for Server, licenses are calculated on a per-device (per server) basis.
• Education, health, and government: Some Sophos customers in these sectors get per-device licensing under a general exception. Some customers are entitled to a license per device, as described in the section General exception for Education, Health and Government Entities.
• Many standalone EDR products: CrowdStrike's self-serve tiers list at $59.99 (Go), $99.99 (Pro), and $184.99 (Enterprise) per device per year. Bitdefender's business tier is also priced per device. Per-device pricing starts around $4–$6 per month depending on seat count and billing term.

Where per-user pricing dominates

• Microsoft's per-user model for Defender is an example. Microsoft sells Defender for Business per user, at $36.00 per user per year. Defender for Endpoint Plan 2 is also per user, and each user can have up to five concurrent, onboarded devices.
• Sophos says most customers are licensed per-user.

Why the choice matters

• Per-device suits company-owned fleets, where each machine has one dedicated owner. It also covers shared or ownerless machines, such as kiosks, lab PCs, and shift-worker terminals, which a per-user model can leave uncounted.
• Per-user suits people who use several devices, but it gets complicated with shared machines, because a device is tied to whoever last signed in. Sophos notes that a device can only have one associated user, but a user can have more than one device.
• A worked example from one blog: 500 employees with three devices each plus 200 shared endpoints comes to $20,400 per month per device versus $9,000 per month per user. That example assumes a per-device price of $12 and a per-user price of $18, so it's illustrative only, but the gap shows how much device count matters. Per-user wins here, unless the license caps devices below 3, which many do in fine print.

Practical takeaway: Compare total cost under both models using your real headcount, devices per person, and number of shared endpoints. Check the license terms for device caps, offline-device rules, and whether the vendor charges for servers separately. Price figures from blogs vary a lot, so confirm them on the vendor's current price list.

If you tell me your vendor, device count, and how many people share machines, I can run the comparison for you.

Endpoint protection and security solutions are frequently priced per device (or "per endpoint"), making it a standard model alongside per-user pricing in the cybersecurity industry.

Whether you are looking at basic antivirus or advanced Endpoint Detection and Response (EDR) platforms, here is how the per-device pricing model works and how it compares to other options.

Why Per-Device Pricing Is Common

The per-device model is deeply rooted in how IT infrastructure is managed.

• Alignment with Technical Reality: Because security agents must be installed on individual pieces of hardware (laptops, desktops, servers, and mobile devices), charging per device often aligns directly with the "work" the software does.
• Infrastructure-Heavy Environments: Per-device pricing is often preferred in industries like manufacturing, healthcare, or retail, where there may be many shared computers, specialized hardware, or servers that do not correspond to a single "user."
• Predictability: For organizations with a stable number of machines, this model provides straightforward, predictable billing that scales linearly as the organization adds or removes hardware.

Pricing Comparison: Per-Device vs. Per-User

Key Considerations for Your Procurement

If you are evaluating endpoint protection, keep these factors in mind:

• Mixed Models: Many Managed Service Providers (MSPs) and vendors now use hybrid models. For example, they may charge a flat "per-user" fee that covers a standard set of devices (e.g., 1 laptop + 1 phone) and then charge a smaller, additional fee for extra devices or servers.
• Device Classes: Be aware that vendors often apply "multipliers" behind the scenes. While a standard workstation might be priced at a base rate, servers are often charged at a higher rate (e.g., 1.5x to 2.5x the workstation rate) because they are more critical and resource-intensive to protect.
• Avoid "Scope Creep": If you choose per-device pricing, clearly define what counts as an "endpoint." Does it include mobile devices? Do virtual machines or thin clients count? Establishing these definitions upfront prevents disputes at renewal or audit time.
• Small Business Alternatives: If you are a small business, some vendors (like those offering Microsoft Defender for Business) have moved toward simplified user-based bundles that include server-side protections, which can be easier to manage than traditional per-device licensing.

Bottom Line: Per-device pricing remains a dominant and highly legitimate model in the security space. It is particularly advantageous if your environment is infrastructure-heavy. If your workforce is largely mobile-first or cloud-based, you may find per-user pricing simpler to manage, but you should not feel pressured to switch if your current device-based model fits your operational setup.

If you’re looking for endpoint protection licensed per device/endpoint, rather than per user, these are current options with published pricing:

For comparison, Microsoft Defender for Endpoint is generally licensed per user, with a user license covering up to five devices, so it may not fit a strict per-device licensing requirement. ³

Prices can change and may depend on region, term, minimum seat count, and reseller. Sources: ¹ CrowdStrike pricing; ² SMB Endpoint Security Price Index; ³ Microsoft Defender pricing.