Pricing
deputyOS is free and open source under Apache-2.0. Run as many devices as you like, track them all in the console, and pay nothing. You pay only for devices you want us to host.
Self-managed
No credit card. No account needed.
$0
forever, any number of devices
- ✓ Unlimited devices, all tracked in the console
- ✓ Run OpenClaw, Hermes, or Khoj
- ✓ First-boot wizard + PWA dashboard
- ✓ Live status, version and spend per device
- ✓ A/B image updates with auto-rollback
- ✓ Backup to your own B2 / R2 bucket
- ✓ Cloudflare Tunnel / Tailscale (bring your own)
- ✓ Air-gapped mode with baked LFM2 models
- Managed tunnel sessions capped at 15 minutes
Hosted
We manage the devices you choose.
$5 /device/mo
less per device as you add more · 7-day trial
- ✓ Everything in Self-managed, plus:
- ✓ Long-lived managed tunnel at
https://your-device.deputyos.com - ✓ Client-side encrypted backups (age) — allowance per device, not pooled
- ✓ Restore onto replacement hardware in one command
- ✓ Migrate a device to a cloud instance, and back again
- ✓ Web Push notifications (cost alerts, agent status)
- ✓ Compressed audit evidence with SQL queries
- ✓ CVE tracking from OSV, NVD, CISA KEV, and EPSS
Host only the devices that need it. The rest stay free and still appear in the console.
Enterprise
Fleets, air-gapped sites, and procurement.
Let's talk
terms per organisation
- ✓ Everything in Hosted, plus:
- ✓ Unlimited hosted devices at a negotiated rate
- ✓ Air-gapped deployment support, including offline update media
- ✓ SBOM, signed provenance and CVE posture for procurement
- ✓ Compliance evidence export and retention to suit your regime
- ✓ Invoicing rather than card payment
- ✓ A named contact who knows your deployment
Before you plan an enterprise rollout
deputyOS is at v0.3.0. There is no third-party security audit yet, no formal SLA, and no SSO or SCIM. If any of those block approval for you, say which and on what timeline — that is how they get prioritised. Full detail on the enterprise page.
What hosting a device costs
You pay per hosted device because each one is something we actively manage: its tunnel stays up, its backups are stored and retained, and its state is kept ready to move. Devices you self-manage cost nothing and still appear in the console.
| Hosted devices | Per device / month |
|---|---|
| 1–3 devices | $5 |
| 4–10 devices | $4 |
| 11–25 devices | $3 |
| 26 or more | Enterprise |
Volume pricing is applied per band, not retroactively — the first three devices are always $5 each, the next seven $4 each, and so on.
1 device
$5
/month
3 devices
$15
/month
8 devices
$35
/month
20 devices
$73
/month
Fair use on tunnel bandwidth
Everything a hosted device costs us is flat except one thing: traffic through the tunnel, which we relay byte for byte. So there is a published limit — 1 TiB per device per calendar month, counted in both directions and visible via the API.
To be clear about the scale: a full day of terminal work is a few megabytes. Driving the web UI hard is tens of megabytes. You would have to move roughly 35 GB every day to reach it. Interactive use will not get close, and we would rather publish the number than leave it to a vague clause.
If a device does cross it we get in touch — nothing is cut off automatically. Bulk file movement is better done directly between machines than relayed through us, and usually that is the fix.
Model usage is never metered by us. You bring your own provider key and pay Anthropic, OpenAI, OpenRouter or Google directly at their rates. deputyOS does not proxy, mark up, or take a cut of model traffic — which is also why running a local model makes that cost effectively zero.
Hosted or self-managed
The same software either way. The difference is who holds the device's state — and that is what decides whether it can move.
| Self-managed | Hosted | |
|---|---|---|
| Number of devices | Unlimited | As many as you choose to host |
| Tracked in the console | Yes | Yes |
| Managed tunnel | 15-minute sessions | Long-lived, own URL |
| Encrypted backup | Your own bucket | Held by us — allowance is per device, not pooled |
| Tunnel bandwidth | n/a — your own tunnel | 1 TiB per device per month (fair use) |
| Restore to new hardware | Manual, from your bucket | One command |
| Migrate to a cloud instance | — | Yes, and back again |
| Cost | Free | From $5/device/month |
Why hosting makes a device portable
A hosted device is a signed image plus an encrypted state backup, both of which we already hold. It can therefore be reconstituted somewhere else on demand, which is what makes these possible with no extra machinery:
- Hardware dies Restore onto a replacement in one command, memory intact.
- Move to the cloud Migrate off your hardware onto a cloud instance, same console.
- Move back Bring it home when the Pi arrives. Nothing is tied to where it ran.
Cloud instances are a destination a hosted device can move to, not a separate product with separate pricing.
FAQ
Does deputyOS get my API keys?
No. Your model provider keys live on your device in
/etc/deputyos/secrets.env (mode 0600) and
are never sent to api.deputyos.com.
The cloud tier stores only opaque ciphertext — we cannot
read your backups or your conversations.
Can I use deputyOS without an account?
Yes. Every feature — including backup to your own B2/R2 bucket and
cloudflared tunnel — works without a
console.deputyos.com login. No sign-in wall.
Who pays the model provider?
You do, directly. deputyOS is the messenger — you bring your own API key for Anthropic, OpenAI, OpenRouter, Google AI Studio, or any compatible provider. We never proxy or meter your traffic.
What encryption do backups use?
Cloud backups are encrypted client-side with age before upload. The server sees only opaque ciphertext. Your age secret key never leaves the device. Learn more in secrets storage.
What does the audit service store?
Device audit events are batched, compressed with zstd, and stored as account-scoped objects. The API keeps metadata for dashboard queries, while the compliance dashboard can run read-only DataFusion SQL over the account's audit event lake.
Is there a business / team plan?
Not yet. The cloud account is gaining fleet, compliance evidence, and CVE tracking first. If you're interested in multi-device staff operations, email hello@deputyos.com.