Pricing
One license. However many firewalls you have.
Upgrades happen two or three times a year. Charging per device would punish you for managing a larger estate, so we don't.
Free trial
No card required
Every feature, on up to two of your devices. The 14 days start when you activate, not when you sign up.
Start free trialProfessional
per year · unlimited devices
Every upgrade mode, as many firewalls as you manage, and a second installation so you can run it from two places.
Talk to us| Capability | Free trial | Professional |
|---|---|---|
| Single firewall upgrades | ✓ | ✓ |
| HA pair upgrades | ✓ | ✓ |
| Azure VM-Series HA | ✓ | ✓ |
| Panorama and Panorama HA | ✓ | ✓ |
| Multi-firewall batch | ✓ | ✓ |
| Scheduled upgrades | ✓ | ✓ |
| Pre-flight checks | ✓ | ✓ |
| Config backup and snapshots | ✓ | ✓ |
| Before/after comparison report | ✓ | ✓ |
| Device inventory | ✓ | ✓ |
| Email notifications | ✓ | ✓ |
| Devices you can upgrade | 2 | Unlimited |
| Installations | 1 | 2 |
| How long it runs | 14 days | 1 year, renewable |
The trial is the whole product, not a demo. Every feature works exactly as it does on a paid license — what's limited is how long you have it and how many devices you point it at. An HA pair counts as two devices, and a device stays counted once you've run checks or an upgrade against it.
Why it's priced this way
No per-device counting
Because upgrades are infrequent
You upgrade a firewall a few times a year. A per-device subscription would have you paying continuously for something you use in bursts.
Because counting is friction
Device limits mean audits, seat management, and a conversation with us every time your estate changes. None of that makes your upgrades safer.
Because it should scale with you
Adding a branch firewall shouldn't trigger a licensing decision. Add as many as you manage.
FAQ
Questions
Is this a cloud service?
No. Night Agent installs and runs on your own machine or a jump host inside your network. It connects out to your firewalls over the XML API. No configuration, logs or credentials are sent to us — see the security page for the one licensing exception.
Does anything get installed on the firewall?
No. Everything is done through the PAN-OS XML API. There is no agent and nothing is left on the device.
Do I need to know Ansible?
No. That's the point. The alternatives are a manual CLI process or playbooks you write and maintain yourself. Night Agent is a guided interface — fill in the firewall, pick a version, and watch it run.
What if the upgrade fails halfway through?
The run stops and tells you where. You keep the config backup, the pre-upgrade snapshot and the complete log. When a step needs a human decision, the run pauses and emails you rather than guessing.
How many firewalls does a license cover?
A full license covers unlimited firewalls. Upgrades happen a few times a year, so charging per device would have punished you for managing a larger estate.
Which PAN-OS versions are supported?
Night Agent validates the upgrade path against Palo Alto's rules before it downloads anything, including the newer releases that allow skipping intermediate versions. If a path isn't supported, it tells you before starting rather than failing mid-install.
Can I upgrade Panorama with it?
Yes — single appliances and HA pairs, with a check set built for Panorama rather than borrowed from firewalls. Dedicated Log Collectors are reported on but not upgraded.
How do I get started?
Enter your email and we send you a license key and a download link straight away — no sales call, no waiting. Install Night Agent, paste the key into Settings → License, and your 14 days start from there.
What's limited during the trial?
No features are. Every upgrade mode works — HA pairs, Azure, Panorama, batches and scheduling included. What's limited is 14 days from activation, one installation, and two devices. An HA pair counts as two, and a device counts from the first time you run checks or an upgrade against it.
What happens when my trial ends?
The application keeps your run history and inventory. You'll need a license to keep running upgrades. Nothing is deleted.
See Night Agent on your own firewalls
Enter your email and we'll send you a license key and a download link straight away. No sales call, no card.
14-day trial · No card required