Official Zenarmor partner in the NetherlandsLicences, implementation and managed service across Europe

What is Zenarmor?

Zenarmor is a software-based next-generation firewall (NGFW) and Secure Service Edge (SSE) platform. It identifies the applications, users and devices behind your network traffic, filters web and cloud usage and blocks threats — on your own hardware, in a virtual machine, or through agents on your employees' laptops and phones. You pay per user rather than per appliance, and you are not tied to a single vendor's hardware.

Zenarmor is developed by Sunny Valley Cyber Security Inc. (founded in 2017; the product was previously called Sensei), which has run a European office in Frankfurt am Main since October 2024. It runs as a plugin on OPNsense, on pfSense CE, and on FreeBSD, Ubuntu, Debian, Amazon Linux 2, OpenWRT and Docker (official installation overview). Endpoint agents are available for Windows, macOS, Linux, Android and iOS, with mobile roll-out through Intune or Jamf.

The product line ranges from NGFW for Business through Zenarmor SSE and ZTNA to SASE, all managed from Zenconsole, the multi-tenant cloud portal. The latest release, Zenarmor 2.7 of 29 September 2026, introduced the Unified Secure and Unified Secure Plus editions, multi-core 10G processing on OPNsense and a selectable region for cloud reporting (release notes). By Zenarmor's own account, it is used by more than 500,000 users in 180 countries.

Why choose Secrotec as your Zenarmor partner?

Any partner can sell you a Zenarmor licence. The difference lies in what you achieve with it. Secrotec brings together four things you rarely find in one company.

1. Auditor and implementer in one team

We carry out ISO 27001, NEN 7510 and ISO 27701 audits ourselves, so we know precisely what evidence a certification body or regulator expects. That is why we configure Zenarmor not only to work well technically, but to be demonstrable: every policy, network segment and report is mapped to a control. Think of ISO 27001:2022 A.8.20 (networks security), A.8.22 (segregation of networks), A.8.23 (web filtering), A.8.15 (logging) and A.8.16 (monitoring activities), the risk-management measures in NIS2 Article 21, and VDA ISA for TISAX readiness. Zenarmor does not make you compliant — a well-configured Zenarmor makes your controls provable.

2. Sharp pricing: partner discount, always negotiable

As an official partner we pass a partner discount on the Zenarmor list price on to our customers. In Zenarmor projects the price is also always negotiable — especially for multi-year terms, multiple sites or a migration from another firewall. And we will tell you honestly which edition you need, even if that is a smaller one.

3. Europe-wide delivery, personal contact

We deliver Zenarmor licences and projects throughout the European Union and have satisfied Zenarmor customers across the EU. You speak directly with the specialist who designs your environment, in English, Dutch, German or French. No call centre, no hand-off to an unknown subcontractor.

4. No hardware lock-in

Zenarmor runs on existing x86 hardware, as a virtual machine (Proxmox, Hyper-V, VMware) or on an OPNsense appliance. We reuse what we can and only recommend new hardware when capacity requires it.

In practice: De Hooge Waerder and the WeTransfer gap

The De Hooge Waerder story shows what Zenarmor can do in a Dutch organisation. The accountancy and advisory firm (founded in 1980, around 200 professionals, five offices) wanted to stop confidential uploads to WeTransfer consistently, on Windows and iOS alike. The solution was Zenarmor SSE on OPNsense with endpoint enforcement, CASB action control, TLS inspection and central management in Zenconsole. The customer-reported results:

• 235 users protected and zero unauthorised WeTransfer uploads;
• no user-facing outage during roll-out, five sites managed centrally;
• no hardware repurchase when moving from Hyper-V to Proxmox;
• according to Zenarmor, roughly €29,000 a year (list price, SSE for 235 users) versus an enterprise quote of about €200,000 a year for ZTNA alone.

“Network segmentation protects the internal network. SSE focuses on the user, the cloud session and the data movement.” — Secrotec, quoted in Zenarmor's customer success story

For clarity: this is Zenarmor's and De Hooge Waerder's own story; Secrotec is quoted in it as an ISO 27001 Lead Auditor and Zenarmor partner. To tackle the same problem in your organisation, read how SSE, CASB and DLP stop confidential uploads to WeTransfer.

How much does Zenarmor cost? 2026 list prices

Since 30 September 2026 Zenarmor has charged per user per month. For a business network, prices start at $5.00 per user per month (Unified Secure, minimum 10 users); the most popular edition, Unified Secure Plus with full TLS inspection, costs $9.00 per user per month. Through Secrotec you pay less than these list prices, thanks to our partner discount.

Edition	List price (USD, excl. VAT)	Best for	Key contents
Free	$0	Testing, 1 user	1 user/gateway, community support
Home	$9.99 per month	Personal use only	Not permitted for business use
Unified Secure	$5.00 (10–49 users) · $4.50 (50–99) · $4.00 (100–150) per user/month	SMBs, office and branch networks	IPS, DNS deep inspection, application control and web filtering, 5 endpoint and 5 mesh agents, cloud IdP, captive portal, gateway HA, 15-day retention; TLS inspection as add-on (+$3 per user/month)
Unified Secure Plus	$9.00 · $8.50 · $8.00 per user/month (same tiers)	Hybrid work, multiple sites	2 agents per user (incl. phone/tablet), full TLS inspection, mesh VPN, site-to-site up to 20 sites, 30-day retention
SSE / ZTNA / SASE	On request	Enterprise and custom scope	90-day retention, custom data residency

Status October 2026, excl. VAT, subject to change. Source: zenarmor.com/plans, accessed 7 October 2026. Prices in US dollars.

• Sites: the first site is included; additional sites cost $50 per site per month (up to 20 sites). Above 150 users or 20 sites, pricing is by quote.
• Devices: one user licence covers two actively used devices. IoT devices, cameras and printers are not counted.
• Prepayment: Zenarmor's own list reduces the price by 15% for 1 year, 25% for 3 years and 35% for 5 years paid upfront. Education and non-profit pricing is also available.
• Platform: OPNsense itself is open source; OPNsense Business Edition costs €149 a year. You can reuse existing hardware or buy an appliance, for example a Deciso DEC740 from €978 (OPNsense shop).

Worked example at list price: 40 users on Unified Secure Plus = 40 × $9.00 = $360 per month, or $4,320 per year. With Zenarmor's annual prepayment reduction this becomes $3,672 per year. Your price through Secrotec is set out in a tailored quote.

Partner discount, and a price that is always negotiable

Secrotec customers receive a partner discount on the Zenarmor list price, and in Zenarmor projects the price is always negotiable. How much you save depends on the number of users, the term and the project scope, which is why we always work with a tailored quote.

Our advice: send us your current renewal quote from Fortinet, Sophos, WatchGuard or Cisco Meraki. We will make a fair comparison based on three-year total cost of ownership, including remote users, sites, hardware and management. If a small single-site appliance without remote users is cheaper at list price, we will say so. Have a look at our 2026 Zenarmor price comparison first.

Request a quote with partner discount

Zenarmor licences and projects across Europe

Secrotec is based in Heerhugowaard in the Netherlands, but we deliver Zenarmor licences and projects throughout the European Union — in the Benelux, in Germany and Austria, in France and beyond. Our satisfied Zenarmor customers are spread across the EU. What that means for you:

• Remote where possible, on site where needed. Zenarmor and Zenconsole can be managed entirely remotely, so most implementation and management work is done at a distance. For hardware installation, a cut-over or a workshop, we come to you.
• Four languages. Advice, documentation and support in English, Dutch, German and French — useful for international organisations with offices in several countries.
• EU data residency. Since Zenarmor 2.7 you choose the region for central cloud reporting, including the Netherlands and Germany. You can also keep reporting data on premises (Elasticsearch or SQLite) and stream it only to your own SIEM or syslog server.
• The vendor close by. Zenarmor has had a European office in Frankfurt am Main since October 2024 (announcement).

For organisations in scope of NIS2 — implemented in the Netherlands through the Cyberbeveiligingswet, in force since 15 August 2026 — that combination of central enforcement, European data storage and provable logging is particularly relevant. Read more in ISO 27001 and NIS2 and NIS2 preparation and cybersecurity compliance.