Update pricing page w/ features coming in 4.84 (#44014)

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
  * Dashboard widgets and Reports added to Free tier
  * Conditional access introduced as Premium (replaces Device health)

* **Feature Enhancements**
* GitOps: new ways-to-use including template-aligned initial runs and
GitOps-maintained installs on policy failure
* MDM migration: improved DEP enrollment troubleshooting
(timestamps/errors)
* Zero-touch: faster DEP profile delivery and ACME hardware-bound certs
for Apple Silicon
  * Recovery lock: automatic passcode rotation
  * Enforce OS settings: Windows cleanup and Apple profile-install retry
* Application deployment: wording/scoping fixes and labels-based
scoping; GitOps installs on policy failure
  * Script execution: Python support on macOS/Linux
  * Continuous scanning: Ubuntu OSV per-CVE detection
* Deploy certificates: Apple CA throttling, Android retry/resend
troubleshooting

* **Chores**
  * Pricing/features documentation updated
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

---------

Co-authored-by: Dan Gordon <daniel@fleetdm.com>
This commit is contained in:
Noah Talerman
2026-04-23 11:53:30 -07:00
committed by GitHub
co-authored by Dan Gordon
parent 0594b5ae0e
commit 637b215cc9
+81 -30
View File
@@ -130,7 +130,7 @@
- industryName: GitOps
friendlyName: Manage endpoints in git
documentationUrl: https://fleetdm.com/guides/sysadmin-diaries-gitops-a-strategic-advantage
description: Fork the best practices GitHub repo and use the included GitHub Actions or GitLab CI/CD pipelines to quickly automate Fleet console and configuration workflow management.
description: Run `fleetctl new` and use the included best practice directory structure, starter files, and GitHub Actions or GitLab CI/CD pipelines to quickly manage your computers as code (configuration as code).
productCategories: [Endpoint operations,Device management,Vulnerability management]
pricingTableCategories: [Configuration]
usualDepartment: IT
@@ -141,7 +141,14 @@
description: A top savings and investment company wanted workflows and automation so that one bad actor can't brick their fleet. This way, they have to make a pull request first.
quote: I don't want one bad actor to brick my fleet. I want them to make a pull request first.
moreInfoUrl: https://docs.google.com/document/d/1hAQL6P--Tt3syq1MTRONAxhQA_2Vjt3oOJJt_O4xbiE/edit?disco=AAABAVnYvns&usp_dm=true#heading=h.7en766pueek4
#
waysToUse:
- description: New Fleet instances are pre-configured with GitOps templates so the first GitOps run matches the default UI setup (4.84.0).
moreInfoUrl: https://github.com/fleetdm/fleet/issues/41409
- description: Add Fleet-maintained apps to policies via GitOps to automatically install software when a policy fails (4.84.0).
moreInfoUrl: https://github.com/fleetdm/fleet/issues/36751
- description: Opt in to managing software, labels, and/or secrets outside of git (via the UI or API) while still using GitOps for other Fleet configuration, enabling gradual adoption of GitOps workflows (4.84.0).
moreInfoUrl: https://github.com/fleetdm/fleet/issues/40171
#
# ╔╦╗╦ ╦╔═╗ ╔═╗╔═╗╔═╗╔╦╗╔═╗╦═╗ ╔═╗╦ ╦╔╦╗╦ ╦╔═╗╔╗╔╔╦╗╦╔═╗╔═╗╔╦╗╦╔═╗╔╗╔
# ║ ║║║║ ║───╠╣ ╠═╣║ ║ ║ ║╠╦╝ ╠═╣║ ║ ║ ╠═╣║╣ ║║║ ║ ║║ ╠═╣ ║ ║║ ║║║║
# ╩ ╚╩╝╚═╝ ╚ ╩ ╩╚═╝ ╩ ╚═╝╩╚═ ╩ ╩╚═╝ ╩ ╩ ╩╚═╝╝╚╝ ╩ ╩╚═╝╩ ╩ ╩ ╩╚═╝╝╚╝
@@ -228,7 +235,7 @@
# ╔╦╗╔╦╗╔╦╗ ╔╦╗╦╔═╗╦═╗╔═╗╔╦╗╦╔═╗╔╗╔
# ║║║ ║║║║║ ║║║║║ ╦╠╦╝╠═╣ ║ ║║ ║║║║
# ╩ ╩═╩╝╩ ╩ ╩ ╩╩╚═╝╩╚═╩ ╩ ╩ ╩╚═╝╝╚╝
- industryName: MDM migration # « end-user initiated MDM migration, with interactive UI
- industryName: MDM migration
description: Easily move your macOS, iOS/iPadOS, Windows, and Linux devices from your current MDM solution to Fleet.
tier: Premium
jamfProHasFeature: yes
@@ -237,6 +244,9 @@
usualDepartment: IT
productCategories: [Device management]
pricingTableCategories: [Devices]
waysToUse:
- description: See the timestamp and errors for the last time Fleet assigned an automatic enrollment profile to Apple (macOS, iOS, iPadOS) hosts in Apple Business (AB), to troubleshoot MDM migration and DEP assignment issues (4.84.0).
moreInfoUrl: https://github.com/fleetdm/fleet/issues/39063
#
# ╔═╗╔═╗╦═╗╔═╗ ╔╦╗╔═╗╦ ╦╔═╗╦ ╦ ╔═╗╔═╗╔╦╗╦ ╦╔═╗
# ╔═╝║╣ ╠╦╝║ ║───║ ║ ║║ ║║ ╠═╣ ╚═╗║╣ ║ ║ ║╠═╝
@@ -256,12 +266,16 @@
- description: Customize the out-of-the-box setup experience for your end users.
- description: Install a bootstrap package to run custom scripts during the setup experience.
- description: Require end users to authenticate with your identity provider (IdP) and agree to an end user license agreement (EULA) before they can use their new workstation
- description: Configuration profiles are delivered to Apple hosts almost immediately after DEP enrollment instead of waiting for the next reconciler cycle (4.84.0).
moreInfoUrl: https://github.com/fleetdm/fleet/issues/34433
- description: Use ACME to generate MDM protocol certificates with hardware-bound device attestation for Apple Silicon Macs enrolling via DEP, ensuring certificates are issued only to legitimate devices (4.84.0).
moreInfoUrl: https://github.com/fleetdm/fleet/issues/15611
demos:
- description: Install a bootstrap package to run custom scripts during the setup experience to enforce required configurations.
moreInfoUrl: https://youtu.be/gt7_dAU0VMY
- description: Connect end users to Wi-Fi by adding your SCEP server.
moreInfoUrl: https://youtu.be/secV4NCGYPg
#
#
# ╔╗ ╦ ╦╔═╗╔╦╗ ╔═╗╔╗╔╦═╗╔═╗╦ ╦ ╔╦╗╔═╗╔╗╔╔╦╗
# ╠╩╗╚╦╝║ ║ ║║ ║╣ ║║║╠╦╝║ ║║ ║ ║║║║╣ ║║║ ║
# ╚═╝ ╩ ╚═╝═╩╝ ╚═╝╝╚╝╩╚═╚═╝╩═╝╩═╝╩ ╩╚═╝╝╚╝ ╩
@@ -274,9 +288,6 @@
usualDepartment: IT
productCategories: [Device management]
pricingTableCategories: [Devices]
waysToUse:
- description: Support ACME as a protocol for MDM certificate generation. Coming soon (2025-03-31)
moreInfoUrl: https://github.com/fleetdm/fleet/issues/15611
- industryName: Work profiles for personal (BYOD) Android
description: Separate work data and apps from personal ones with work profiles on personal Android devices.
documentationUrl: https://fleetdm.com/guides/android-mdm-setup
@@ -447,6 +458,9 @@
usualDepartment: IT
productCategories: [Device management]
pricingTableCategories: [Devices]
waysToUse:
- description: Automatically rotate the Recovery Lock password on macOS hosts 1 hour after they're viewed so passwords are never reused (4.84.0).
moreInfoUrl: https://github.com/fleetdm/fleet/issues/41003
#
# ╔═╗╔╗╔╔═╗╔═╗╦═╗╔═╗╔═╗ ╔═╗╔═╗╔═╗╦═╗╔═╗╔╦╗╦╔╗╔╔═╗ ╔═╗╦ ╦╔═╗╔╦╗╔═╗╔╦╗ ╦ ╦╔═╗╔╦╗╔═╗╔╦╗╔═╗╔═╗
# ║╣ ║║║╠╣ ║ ║╠╦╝║ ║╣ ║ ║╠═╝║╣ ╠╦╝╠═╣ ║ ║║║║║ ╦ ╚═╗╚╦╝╚═╗ ║ ║╣ ║║║ ║ ║╠═╝ ║║╠═╣ ║ ║╣ ╚═╗
@@ -492,11 +506,15 @@
moreInfoUrl: https://developer.apple.com/documentation/devicemanagement/schedule_an_os_update
- description: Configure agent options remotely, over the air. (Includes osquery config, and osquery startup flags.).
moreInfoUrl: https://fleetdm.com/docs/configuration/agent-configuration
- description: Automatically remove settings from Windows hosts when a configuration profile is deleted (4.84.0).
moreInfoUrl: https://github.com/fleetdm/fleet/issues/33418
- description: Automatically retries failed configuration profile installations up to 3 times on Apple macOS, iOS, and iPadOS hosts, eliminating compliance gaps caused by network blips (4.84.0).
moreInfoUrl: https://github.com/fleetdm/fleet/issues/42327
productCategories: [Device management]
pricingTableCategories: [Devices]
#
# ╔╦╗╔═╗╔═╗╦ ╔═╗╦═╗╔═╗╔╦╗╦╦ ╦╔═╗ ╔╦╗╔═╗╦ ╦╦╔═╗╔═╗ ╔╦╗╔═╗╔╗╔╔═╗╔═╗╔═╗╔╦╗╔═╗╔╗╔╔╦╗
# ║║║╣ ║ ║ ╠═╣╠╦╝╠═╣ ║ ║╚╗╔╝║╣ ║║║╣ ╚╗╔╝║║ ║╣ ║║║╠═╣║║║╠═╣║ ╦║╣ ║║║║╣ ║║║ ║
#
# ╔╦╗╔═╗╔═╗╦ ╔═╗╦═╗╔═╗╔╦╗╦╦ ╦╔═╗ ╔╦╗╔═╗╦ ╦╦╔═╗╔═╗ ╔╦╗╔═╗╔╗╔╔═╗╔═╗╔═╗╔╦╗╔═╗╔╗╔╔╦╗
# ║║║╣ ║ ║ ╠═╣╠╦╝╠═╣ ║ ║╚╗╔╝║╣ ║║║╣ ╚╗╔╝║║ ║╣ ║║║╠═╣║║║╠═╣║ ╦║╣ ║║║║╣ ║║║ ║
# ═╩╝╚═╝╚═╝╩═╝╩ ╩╩╚═╩ ╩ ╩ ╩ ╚╝ ╚═╝ ═╩╝╚═╝ ╚╝ ╩╚═╝╚═╝ ╩ ╩╩ ╩╝╚╝╩ ╩╚═╝╚═╝╩ ╩╚═╝╝╚╝ ╩
- industryName: Declarative Device Management (DDM) support for configuration profiles
description: Full support for Apple DDM configuration profiles.
@@ -511,12 +529,13 @@
# ╔╦╗╔═╗╦ ╦╦╔═╗╔═╗ ╦ ╦╔═╗╔═╗╦ ╔╦╗╦ ╦
# ║║║╣ ╚╗╔╝║║ ║╣ ╠═╣║╣ ╠═╣║ ║ ╠═╣
# ═╩╝╚═╝ ╚╝ ╩╚═╝╚═╝ ╩ ╩╚═╝╩ ╩╩═╝╩ ╩ ╩
- industryName: Device health
friendlyName: Automate device health
description: Automatically report system health issues using webhooks or integrations, to notify or quarantine outdated or misconfigured systems that are at higher risk of vulnerabilities or theft.
documentationUrl: https://fleetdm.com/docs/using-fleet/automations#automations
- industryName: Conditional access
friendlyName: Device health
description: Automatically block access to corporate resources when a device falls out of compliance with Fleet policies, using Okta or Microsoft Entra ID conditional access (zero trust). This keep corporate data out of the hands of compromised or misconfigured devices (4.84.0).
documentationUrl: https://fleetdm.com/docs/using-fleet/conditional-access
moreInfoUrl: https://github.com/fleetdm/fleet/issues/38041
screenshotSrc:
tier: Free
tier: Premium
jamfProHasFeature: no
jamfProtectHasFeature: yes
productCategories: [Device management,Endpoint operations]
@@ -531,6 +550,7 @@
moreInfoUrl: https://github.com/fleetdm/fleet/issues/14920
- description: Control and restore access to applications by automatically restricting access when devices do not meet particular security requirements.
moreInfoUrl: https://duo.com/docs/device-health
- description: Automatically report system health issues using webhooks or integrations, to notify or quarantine outdated or misconfigured systems that are at higher risk of vulnerabilities or theft.
demos:
- description: Control which laptop and desktop devices can access corporate apps and websites based on what vulnerabilities it might be exposed to based on how the device is configured, whether it's up to date, its MDM enrollment status, and anything else you can build in a SQL query of Fleet's 300 data tables representing information about enrolled host systems (coming soon).
moreInfoUrl: https://github.com/fleetdm/fleet/issues/16236
@@ -584,8 +604,12 @@
moreInfoUrl: https://github.com/fleetdm/fleet/issues/18867
waysToUse:
- description: Easily configure and install SentinelOne, Crowdstrike, and other security tools.
moreInfoUrl: https://github.com/fleetdm/fleet/issues/14921
- description: Offer licenses for Photoshop and other App Sore apps for your end users.
moreInfoUrl: https://github.com/fleetdm/fleet/issues/14921
- description: Offer licenses for Photoshop and other App Store apps for your end users.
- description: Use "labels include all" custom scope to target software to specific groups of hosts using multiple label criteria (4.84.0).
moreInfoUrl: https://github.com/fleetdm/fleet/issues/39916
- description: Add a Fleet-maintained app to a policy via GitOps to automatically install the app when the policy fails (4.84.0).
moreInfoUrl: https://github.com/fleetdm/fleet/issues/36751
#
# ╔═╗╔═╗╦ ╔═╗ ╔═╗╔═╗╦═╗╦ ╦╦╔═╗╔═╗ ╔═╗╔═╗╔═╗╦ ╦╔═╗╔═╗╔╦╗╦╔═╗╔╗╔ ╦╔╗╔╔═╗╔╦╗╔═╗╦ ╦ ╔═╗╔╦╗╦╔═╗╔╗╔
# ╚═╗║╣ ║ ╠╣───╚═╗║╣ ╠╦╝╚╗╔╝║║ ║╣ ╠═╣╠═╝╠═╝║ ║║ ╠═╣ ║ ║║ ║║║║ ║║║║╚═╗ ║ ╠═╣║ ║ ╠═╣ ║ ║║ ║║║║
@@ -657,8 +681,10 @@
- description: Run scripts on online/offline hosts
moreInfoUrl: https://github.com/fleetdm/fleet/issues/15529
- description: Only maintainers and admins can run scripts.
moreInfoUrl: https://github.com/fleetdm/fleet/issues/19055
#
moreInfoUrl: https://github.com/fleetdm/fleet/issues/19055
- description: Run Python scripts on macOS and Linux hosts (4.84.0).
moreInfoUrl: https://github.com/fleetdm/fleet/issues/38793
#
# ╔╦╗╔═╗╦ ╦╦╔═╗╔═╗ ╦═╗╔═╗╔╦╗╔═╗╔╦╗╦╔═╗╔╦╗╦╔═╗╔╗╔
# ║║║╣ ╚╗╔╝║║ ║╣ ╠╦╝║╣ ║║║║╣ ║║║╠═╣ ║ ║║ ║║║║
# ═╩╝╚═╝ ╚╝ ╩╚═╝╚═╝ ╩╚═╚═╝╩ ╩╚═╝═╩╝╩╩ ╩ ╩ ╩╚═╝╝╚╝
@@ -723,11 +749,22 @@
#
#
#
# ╔═╗ ╦ ╦╔═╗╦═╗╦╔═╗╔═╗
# ║═╬╗║ ║║╣ ╠╦╝║║╣ ╚═╗
# ╚═╝╚╚═╝╚═╝╩╚═╩╚═╝╚═╝
- industryName: Queries
description: Scheduled or saved queries with optional AI-generated descriptions, and, live queries for real-time data collection.
- industryName: Dashboard widgets
description: At-a-glance visibility into host activity and enrollment trends directly on the Fleet dashboard.
moreInfoUrl: https://github.com/fleetdm/fleet/issues/41519
tier: Free
jamfProHasFeature: yes
jamfProtectHasFeature: no
usualDepartment: IT
productCategories: [Endpoint operations,Device management]
pricingTableCategories: [Devices]
waysToUse:
- description: View host activity and hosts enrolled widgets to understand fleet uptime and host distribution at a glance (4.84.0).
# ╔═╗ ╦ ╦╔═╗╦═╗╦╔═╗╔═╗
# ║═╬╗║ ║║╣ ╠╦╝║║╣ ╚═╗
# ╚═╝╚╚═╝╚═╝╩╚═╩╚═╝╚═╝
- industryName: Reports
description: Reports with optional AI-generated descriptions, and, live reports for real-time data collection.
documentationUrl: https://fleetdm.com/docs/using-fleet/fleet-ui
tier: Free
jamfProHasFeature: no
@@ -735,6 +772,11 @@
productCategories: [Endpoint operations,Device management,Vulnerability management]
pricingTableCategories: [Devices]
usualDepartment: IT
waysToUse:
- description: View each report and its first result directly on the Host details page, similar to extension attributes in Jamf (4.84.0).
moreInfoUrl: https://github.com/fleetdm/fleet/issues/40187
- description: Query Go binaries installed via go install using the go_binaries table to detect software not tracked in Fleet's software inventory (4.84.0).
moreInfoUrl: https://github.com/fleetdm/fleet/issues/40138
demos:
- description: A top financial services company needed to set up rolling deployments for changes to osquery agents running on their production servers.
moreInfoUrl: https://docs.google.com/document/d/1UdzZMyBLbs9SUXfSXN2x2wZQCbjZZUetYlNWH6-ryqQ/edit#heading=h.2lh6ehprpvl6
@@ -773,7 +815,7 @@
productCategories: [Endpoint operations]
pricingTableCategories: [Devices]
usualDepartment: IT
#
#
# ╦═╗╔═╗╔╦╗╔═╗╔╦╗╔═╗ ╔═╗╔═╗╔╦╗╔╦╗╦╔╗╔╔═╗╔═╗
# ╠╦╝║╣ ║║║║ ║ ║ ║╣ ╚═╗║╣ ║ ║ ║║║║║ ╦╚═╗
# ╩╚═╚═╝╩ ╩╚═╝ ╩ ╚═╝ ╚═╝╚═╝ ╩ ╩ ╩╝╚╝╚═╝╚═╝
@@ -1028,6 +1070,8 @@
moreInfoUrl: https://www.linkedin.com/feed/update/urn:li:activity:7162614115025215488?commentUrn=urn%3Ali%3Acomment%3A%28activity%3A7162614115025215488%2C7162681703918985216%29&dashCommentUrn=urn%3Ali%3Afsd_comment%3A%287162681703918985216%2Curn%3Ali%3Aactivity%3A7162614115025215488%29
- description: 'Melissa Bischoping: CVSS is never enough to contextualize the urgency or risk of a vulnerability in your environment. It is one metric that needs to be part of an overall risk calculus, but a CVSS of 6 can be a greater threat in your organization than a CVSS of 10 based on the environmental variables and mitigations. Only two 10.0s here, but several lower severity that are resulting in high-impact breaches. Getting a handle on managing that public facing infrastructure and being able to rapidly patch the apps and devices with such exposure needs to be part of an overall plan, but must go hand in hand with mitigations and layers of a zero trust design. CVSS isnt the sole determination of risk, its only one partial piece of data to understand the impact of a vulnerability if exploited.'
moreInfoUrl: https://www.linkedin.com/feed/update/urn:li:activity:7162614115025215488?commentUrn=urn%3Ali%3Acomment%3A%28activity%3A7162614115025215488%2C7162629486344159232%29&dashCommentUrn=urn%3Ali%3Afsd_comment%3A%287162629486344159232%2Curn%3Ali%3Aactivity%3A7162614115025215488%29
- description: Vulnerability detection for Ubuntu uses per-CVE OSV data instead of advisory-grouped OVAL data, reducing false positives and improving accuracy (4.84.0).
moreInfoUrl: https://github.com/fleetdm/fleet/issues/39900
demos:
- description: A top gaming company wanted to replace Qualys for infrastructure vulnerability detection.
quote: So we have some stuff today through Qualys, but it's just not very good. A lot of it is...it's just really noisy. I'm trying to find out specifically, actually what packages are installed where, and then the ability to live query them.
@@ -1168,7 +1212,7 @@
waysToUse:
- description: Automatically set admin access to Fleet based on your IDP
- industryName: Deploy certificates
description: Help your end users connect to third-party tools (e.g. Wi-Fi or VPN) by deploying certificates from your certificate authority (CA).
description: Help your end users connect to third-party tools (e.g. Wi-Fi or VPN) by deploying certificates from your certificate authority (CA).
documentationUrl: https://fleetdm.com/guides/ndes-scep-proxy
isExperimental: yes
productCategories: [Device management]
@@ -1177,6 +1221,13 @@
tier: Premium
jamfProHasFeature: yes
jamfProtectHasFeature: no
waysToUse:
- description: Throttle certificate profile requests to avoid overloading your CA server when deploying certificates to large numbers of Apple hosts (4.84.0).
moreInfoUrl: https://github.com/fleetdm/fleet/issues/38002
- description: Automatically retry failed certificate installations up to 3 times on Android hosts (4.84.0).
moreInfoUrl: https://github.com/fleetdm/fleet/issues/37546
- description: Resend certificates to a specific Android host to troubleshoot issues (4.84.0).
moreInfoUrl: https://github.com/fleetdm/fleet/issues/37556
#
# ╔╦╗╦ ╦╦╦═╗╔╦╗ ╔═╗╔═╗╦═╗╔╦╗╦ ╦ ╔═╗╦ ╦╔╦╗╔═╗╔╦╗╔═╗╔╦╗╦╔═╗╔╗╔
# ║ ╠═╣║╠╦╝ ║║───╠═╝╠═╣╠╦╝ ║ ╚╦╝ ╠═╣║ ║ ║ ║ ║║║║╠═╣ ║ ║║ ║║║║
@@ -1230,10 +1281,10 @@
- description: (Tines, Torq) Build custom workflows that trigger in various situations.
- description: (Custom IdP) Manage access to Fleet single sign-on (SSO) through any IdP (using SAML).
buzzwords: [Vanta,Torq,Custom IdP]
#
# ╔╦╗╦ ╦╔╗╔╦╔═╦ ╔═╗╔═╗╔╦╗╔═╗╔═╗╔╦╗╦╔╗ ╦╦ ╦╔╦╗╦ ╦
# ║║║║ ║║║║╠╩╗║ ║ ║ ║║║║╠═╝╠═╣ ║ ║╠╩╗║║ ║ ║ ╚╦╝
# ╩ ╩╚═╝╝╚╝╩ ╩╩ ╚═╝╚═╝╩ ╩╩ ╩ ╩ ╩ ╩╚═╝╩╩═╝╩ ╩ ╩
#
# ╔╦╗╦ ╦╔╗╔╦╔═╦ ╔═╗╔═╗╔╦╗╔═╗╔═╗╔╦╗╦╔╗ ╦╦ ╦╔╦╗╦ ╦
# ║║║║ ║║║║╠╩╗║ ║ ║ ║║║║╠═╝╠═╣ ║ ║╠╩╗║║ ║ ║ ╚╦╝
# ╩ ╩╚═╝╝╚╝╩ ╩╩ ╚═╝╚═╝╩ ╩╩ ╩ ╩ ╩ ╩╚═╝╩╩═╝╩ ╩ ╩
- industryName: Munki compatibility + visibility
tier: Premium
jamfProHasFeature: yes