Cisco Duo Editions and Pricing
Protect your access with Duo’s easy, effective and economical trusted access solution

---

	Duo Free Free up to 10 users	Duo MFA $3 / User / Month	Duo Access $6 / User / Month	Duo Beyond $9 / User / Month
Unlimited application integrations
User Trust
MFA with Duo Push for iOS and Android
Verified Duo Push with configurable length numeric code for iOS and Android
Passwordless authentication to SSO applications with Duo Mobile, FIDO security keys and device biometrics (Duo SSO, third-party SSO)
MFA with security keys, FIDO2, OTP, phone callback1, SMS & hardware tokens
Telephony credits 100 credits/user/year
User self-enrollment & self-management
Device Trust
A dashboard of all devices accessing applications
Monitor and identify risky devices
Visibility into security health of laptops and desktops (Duo Device Health application)
Visibility into security health of mobile devices
Identify corporate owned versus BYOD laptops and desktops
Identify corporate owned versus BYOD mobile devices
Identify if a third-party agent is enabled on the device (Ex: Anti-virus, Anti-malware)
Adaptive Authentication & Policy Enforcement
Assign and enforce security policies globally or per application
Enforce policies based on authorized networks
Enforce policies based on user's location
Assign and enforce security policies per user group
Block Tor and anonymous networks
Detect anomalous or risky access
Enforce device trust policies based on security health of laptops and desktops (out-of-date software, encryption, firewall, etc)
Enforce device trust policies based on security health of mobile devices (encryption, tampered, screen lock, biometrics)
Notify users to remediate their devices
Limit device access to applications based on enrollment in endpoint management systems such as Landesk, JAMF, Microsoft Intune
Limit mobile access to applications based on enrollment in MDMs (AirWatch, MobileIron, Microsoft Intune)
Risk-Based Authentication
Dynamically step up to more secure authentication method in response to risk signals and known attack patterns from authentication data
Enforce location-based policies accurately using IP address and Wi-Fi Fingerprint while ensuring user privacy
Enable longer sessions and only require re-authentication when risk signals change
Get comprehensive details of trust assessment of each login in authentication logs
Secure Application Access & Single Sign-On (SSO)
Cloud-based SSO for all SAML 2.0 applications
Easy application access with Duo Central
Passwordless login to Duo Central
Secure access to internal company web applications (Duo Network Gateway)
Secure access to specific internal servers via SSH (Duo Network Gateway)
Secure access to Windows servers via RDP (Duo Network Gateway)
Secure remote access to applications hosted in AWS, Azure, and GCP (Duo Network Gateway)
Support		Email, chat & telephone support 9-5 ET, 9-5 PT, M-F. 24x7x365 support for critical issues (Premium available)
Duo Care: Premium Support		Available	Available	Available

*Duo EDU customers do not receive allowance telephony credits.
*Duo Care pricing varies based on the total number of user licenses purchased.
¹ Self-service subscription and Duo Free customers that want to enable MFA using phone callback should contact support.