Flat-rate tiers.
No per-device sprawl.
Budget predictability from day one. One monthly fee covers every device up to your tier's limit — no bill shock when you add staff. 60–90% cheaper than legacy per-device RMM tools.
- Windows + Linux patching
- Patch approval rings + auto-ramp
- CVE vulnerability scanning
- Baseline + drift detection
- Community support (docs & forum)
- No remote management
- No compliance evidence packs
- PatchPilot branding on agent
- Everything in Free
- Windows + Linux patching
- Third-party app patching (150+ apps)
- Remote desktop + terminal + file transfer
- Per-connection step-up MFA
- Helpdesk integrations (Jira, Zendesk, HubSpot)
- BYO offsite backup (S3/B2/Wasabi/Azure/R2)
- Email support, 24h SLA
- No compliance evidence packs
- Everything in Starter
- 7-framework compliance evidence packs
- Org-wide step-up MFA enforcement
- SIEM export: CEF / LEEF / JSON
- AI Service Desk Triage (£49/mo add-on)
- Priority support, 4h SLA
- Everything in Pro
- AI Service Desk Triage included
- Custom branding on agent
- MSP multi-tenant console
- Priority support, 4h SLA
- Dedicated onboarding
- Everything in Business
- SSO / SAML (Azure AD, Okta, Google)
- On-prem / sovereign deployment
- Unlimited session recording — your bucket
- White-label + custom domain
- Dedicated customer success manager
- SLA credits (99.9% uptime)
- 90-day pilot (1,000 devices, 10 techs, no card)
MSP cost calculator
All your client endpoints pool into one volume band. Enter your totals to see your monthly MSP bill.
Special pricing
Volume MSP pricing and 50% off for qualifying education customers.
🏠 MSP volume pricing
All your client endpoints pooled into one volume band. One invoice from us — you bill clients with your margin. Documentation Portal is free in the MSP track.
+ £30/tech/month platform fee (covers MSP console seat).
See MSP features →Request MSP pricing →
🏫 Education — 50% off
Schools, MATs, colleges and universities. KCSIE-aligned. DfE-friendly. Term-flex billing for student devices in summer.
50% discount applies to Pro and Business tiers. Minimum 50 managed devices. Sales-verified only — submit your DfE URN, Ofsted reference, or .ac.uk / .sch.uk / .edu domain proof. 24-hour SLA on discount code approval. Annual billing required. Smaller schools (<50 devices): Free tier covers up to 10 devices.
See education features →Apply for education discount →
🤗 Not-for-profit — 25% off
Registered charities (England & Wales Charity Commission, Scottish OSCR, NI CCNI, or equivalent). 25% off Starter / Pro / Business tiers. Annual billing required.
Manual approval — provide your charity registration number. Not stackable with the Education discount.
Apply for NFP discount →🥇 Design partner — Enterprise on-site (Q4 2026)
Air-gapped / on-prem / private-cloud deployment GA Q4 2026. Co-engineer the bundle with us as a design partner from now until GA — locked early-bird pricing.
Docker Compose deployment, license-file activation, offline CVE feed sync, on-prem TLS, dedicated support engineer.
Become a design partner →Add-ons
Optional extras — bolt on what you need, skip what you don't.
Full feature comparison
| Feature | Free | Starter | Pro | Business | Enterprise |
|---|---|---|---|---|---|
| Patching | |||||
| Windows + Linux patching | ✓ | ✓ | ✓ | ✓ | ✓ |
| Third-party app patching (winget) | – | ✓ | ✓ | ✓ | ✓ |
| Patch approval rings + auto-ramp | ✓ | ✓ | ✓ | ✓ | ✓ |
| VSS snapshots + rollback | – | – | ✓ | ✓ | ✓ |
| Remote Management | |||||
| Remote desktop + terminal | – | ✓ | ✓ | ✓ | ✓ |
| File transfer | – | ✓ | ✓ | ✓ | ✓ |
| Per-connection step-up MFA | – | ✓ | ✓ org-enforced | ✓ org-enforced | ✓ org-enforced |
| Session recording | – | 50 GB | 250 GB | Unlimited | Unlimited |
| Security | |||||
| CVE vulnerability scanning (KEV-aware) | ✓ | ✓ | ✓ | ✓ | ✓ |
| Ransomware Tripwire canary | – | ✓ | ✓ | ✓ | ✓ |
| BitLocker key escrow (step-up reveal) | – | ✓ | ✓ | ✓ | ✓ |
| Baseline capture + drift detection | ✓ | ✓ | ✓ | ✓ | ✓ |
| Compliance | |||||
| 7-framework evidence packs (CE, ISO 27001, NIS2, SOC 2, HIPAA, PCI-DSS, CISA-BOD) | – | – | ✓ | ✓ | ✓ |
| SIEM export (CEF / LEEF / JSON) | – | – | ✓ | ✓ | ✓ |
| Audit log retention | 30 days | 90 days | 1 year | 3 years | 7 years |
| Integrations | |||||
| Helpdesk — Jira, Zendesk, HubSpot, Halo | – | ✓ free | ✓ free | ✓ free | ✓ free |
| SSO / SAML | – | – | – | – | ✓ |
| PSA — Halo, Autotask, ConnectWise | – | – | – | ✓ MSP | ✓ MSP |
| Platform | |||||
| BYO offsite backup (S3/B2/Wasabi/Azure/R2) | – | ✓ | ✓ | ✓ | ✓ |
| Custom branding | – | – | – | ✓ | ✓ + white-label |
| On-prem deployment | – | – | – | – | ✓ |
| MSP multi-tenant console | – | – | – | ✓ | ✓ |
| Support | |||||
| Community support (docs, forum) | ✓ | ✓ | ✓ | ✓ | ✓ |
| Email support | ✗ not included | 24h SLA | 4h SLA | 4h SLA | Dedicated CSM |
| Uptime SLA with credits | – | – | – | – | 99.9% |
What's not included
No hidden gotchas — here's exactly what each tier doesn't do.
All tiers
- macOS: roadmap v1.1 (Windows + Linux today)
- iOS / Android MDM — use Intune or Jamf; we integrate with both
- Image-based endpoint backup (Veeam/Acronis) — we do config backup, not disk images
- SNMP / network device management
Free tier
- Email support — community docs and forum only; email support is Starter and above
- Remote desktop, terminal, file transfer (Starter and above)
- Third-party app patching via winget (Starter and above)
- Compliance evidence PDFs (Pro and above)
- Session recording (Starter and above)
- Helpdesk integrations (Starter and above)
- PatchPilot branding appears on agent installer and email footers
- 10-device cap (upgrade to Starter for 100 devices)
Starter (£49/mo)
- 7-framework compliance evidence packs (Pro and above)
- BYO offsite backup (Pro and above)
- SIEM export (Pro and above)
- Session recording capped at 50 GB — contact us if you hit the cap
Pro (£149/mo)
- SSO / SAML (Enterprise only)
- On-prem deployment (Enterprise only)
- White-label + custom domain (Business/Enterprise)
- Session recording at 250 GB cap (Business/Enterprise = unlimited)
- Dedicated CSM (Enterprise only)
Win11 LTSC: patch-management works on all Windows SKUs including LTSC. Third-party app patching via winget requires manual winget install on LTSC. All other features are unaffected.
Frequently asked questions
Honest answers, no spin.
What you'd otherwise pay for separately
Most SMBs and MSPs pay £25–50/device/month spread across multiple vendors for what PatchPilot does in one flat-rate tier.
PatchPilot replaces 8–10 separate vendors — typically 60–90% less than the sum.
| What it does | Vendors who charge separately | Their typical cost | PatchPilot |
|---|---|---|---|
| Patch management | NinjaOne, Atera, Automox | £8–12/device | ✓ included |
| Remote desktop | TeamViewer, AnyDesk, Splashtop | £30–50/tech | ✓ included |
| Helpdesk integration | Autotask, ConnectWise PSA | £30–100/tech | ✓ included (Jira/Zendesk/HubSpot) |
| File backup to BYO storage | Datto, Veeam, Acronis | £5–15/device | ✓ included (image-level Q1 2027) |
| Compliance evidence packs | Vanta, Drata, Tugboat Logic | £400–800/mo | ✓ included (7 frameworks) |
| Network discovery + topology | Auvik, Domotz | £5–20/device | ✓ included (SNMP polling Q3 2026) |
| BYO storage / data sovereignty | typically self-built | £200+/mo dev time | ✓ included (S3/B2/Wasabi/R2/Azure) |
| BitLocker key escrow | Microsoft Intune | £8/user/mo | ✓ included |
| Vulnerability scanning + KEV | Qualys, Rapid7, Tenable | £10–30/device | ✓ included |
| Audit log + tamper-evident chain | Splunk, Sumo Logic (SIEM) | £400+/mo | ✓ included |
| Per-connection MFA (step-up) | none | n/a | ✓ included |
Not sure which tier?
Start on the Free tier (10 devices, no card) and upgrade when you need more. Most teams move to Starter when they hit the device cap or need remote management.