Team
€149 per month
30-day trial — no credit card
- Devices
- 25
- Policies
- 1
- DNS decisions
- 1M / mo
- Log retention
- 30 days
- Central management plane for up to 100 endpoints
- Policy, live block reporting, audit export, and managed enrollment
Pricing.
Team at €149/month for up to 100 endpoints. Business from €499/month for larger fleets. Every plan starts with a 30-day trial — no credit card.
Business
from €499 per month
30-day trial — no credit card
- Devices
- 250
- Policies
- 5
- DNS decisions
- 10M / mo
- Log retention
- 1 year
- Unlimited endpoints, Intune deployment, and Entra SSO
- Custom categories, SLA, and compliance-grade audit exports
Questions.
-
Where is tenant data stored?
Policy, block events, and enrollment records live in your Spot Suite Customer Environment on Cloudflare Workers and D1. Threat indicator bundles are signed at the edge and pulled by agents — no third-party DNS proxy in the path.
-
Does ClearScreen support SSO?
Yes. Admin sign-in uses Microsoft Entra ID through Spot Suite OIDC at spot-cloud.spot-suite.com. Device agents authenticate with per-device enrollment credentials, not user passwords.
-
Do you decrypt TLS traffic?
No. ClearScreen enforces at DNS only. Blocked domains resolve to a local sinkhole and show a block page — there is no TLS inspection, PAC file, or network gateway in the policy path.
-
How does the 30-day trial work?
Sign up without a credit card and run managed mode for up to 100 endpoints. Category policy, block reporting, and audit export are included. Convert to Team when you are ready.
-
What happens when we hit the included usage?
Usage is soft-capped. You get an alert at 80% of any allowance, and DNS decisions are never blocked mid-month. If you run over an allowance two months in a row, we move you to the next plan at the following billing cycle — no per-unit overage fees.
Start with one policy group.
Deploy the agent to a pilot fleet, set UT1 categories, and review blocks on device before a wider rollout.