Technology reviews & practical guides
GoodAccess review for October 2026: $7 Essential and $11 Premium per user with a 5-user minimum, $49 gateways, new WireGuard on Windows, plus the refund and compliance fine print.
GoodAccess is a cloud business VPN from a small Czech company that sells two things in one subscription: a dedicated static IP you can whitelist on your SaaS apps and servers, and - on its higher tier - a zero trust access layer that decides which user, on which device, can reach which system.
The October 2026 version of the product is not the one most older reviews describe. The free Starter plan is gone, every paid plan now starts at 5 users, and the dedicated gateway add-on rose from $39 to $49 a month in late 2025. In exchange, the Premium tier carries real ZTNA features and the Windows app just picked up WireGuard. This review works out what a small IT team will actually pay, what Essential and Premium each unlock, and where the fine print bites.
GoodAccess is one of the simplest ways for a small business to get a dedicated static IP plus DNS threat blocking, and Premium adds genuine zero trust controls at a price that stays readable. The catches are the 5-seat floor, a short refund window, compliance claims that are worded more carefully than the badges, and no agentless access.
GoodAccess prices per user, in US dollars, with a 20% discount for paying a year up front. The per-user rates have not moved since at least January 2024; what changed is the gateway add-on, which went from $39 to $49 a month between the September and December 2025 versions of the pricing page.
Because of the 5-user floor, the cheapest possible GoodAccess subscription is 5 x $7 = $35 a month, or $420 a year, on Essential billed annually. Paying monthly lifts that to $45. Premium starts at $55 a month annually ($660 a year) or $70 monthly. A two-person team pays for five seats either way.
Gateways are where the bill can grow. The plan cards say "+$49/mo per dedicated gateway", while the add-on table lists "Additional Gateways (High Availability)" at $49 a month, which suggests the first gateway is included. The pricing page does not settle it in one sentence, so confirm with sales before you budget. Each extra site-to-site connector on Premium costs another $29 a month.
Prices exclude taxes. GoodAccess takes PayPal and cards (Visa, Mastercard, American Express, Apple Pay, Google Pay), and wire transfer by arrangement for annual plans only. You can upgrade at any time, but downgrades only take effect at the renewal date.
Older GoodAccess reviews, and a few of the company's own pages, still mention Starter, a free plan for very small teams. It no longer exists. The small-teams page now returns a Page Not Found error, the footer link to it disappeared from the live site after April 2026, and the pricing page lists only Essential, Premium and Enterprise.
The leftovers can mislead: the security and compliance page still describes Starter as a free business VPN, and a support FAQ still tells teams with fewer than 5 users to check an offer for small teams that leads nowhere. The only free way in today is the 14-day trial, which needs no credit card. GoodAccess says the trial is full-featured, though its terms note that some features may be restricted during the trial depending on the plan.
Essential is the business VPN half of the product. Each gateway gets a public static IPv4 address dedicated to your team for as long as the service is prepaid, which is the reason most buyers show up: you whitelist that one address on your CRM, cloud consoles or office firewall, and only connected staff can reach them.
What Essential does not give you is per-application control. Anyone connected to the gateway gets the same network path; deciding who reaches which system, and from which device, is a Premium feature.
Premium is where GoodAccess earns the ZTNA label. Its core is Access Cards: you group people and attach the systems, clouds and branches they may reach, and when. Every protected system then shows which cards can see it, so access is defined per resource rather than per network.
Device Posture Check, also Premium-only, tests the device before it connects. On Windows the checks cover disk encryption, antivirus, firewall, SMBv1, domain membership and the presence of a registry key, file, service or process, with separate check lists for Linux, macOS, iOS and iPadOS. A policy that fails can either deny access and log it, or just log it - useful for rolling out rules without locking people out on day one.
GoodAccess ships clients for Windows, macOS 14.6 and later, iOS 18.6 and later, Android 10 and later, ChromeOS and Linux. Every user needs the app; there is no browser-based or agentless access, so contractors on unmanaged machines still have to install something.
The supported protocols are OpenVPN, IKEv2 and WireGuard. WireGuard is new: it arrived in Windows app 4.8.0 on 2026-09-29, and the macOS changelog has no matching entry yet, so do not assume it is available on every platform. The Windows app also gained OpenVPN DCO support in June 2026 and automatic updates in April.
Manual OpenVPN configuration files are available on email request by the team owner only, and a device connecting that way skips posture checks, MFA and geo restrictions. Treat them as an exception for routers and headless boxes, not a way around the app.
For offices and cloud networks, Branch and Cloud connectors join them to GoodAccess with a site-to-site IPsec tunnel. The documentation covers Cisco, Meraki, FortiGate, MikroTik, SonicWall, UniFi and Zyxel hardware, plus AWS, Google Cloud and Azure. Essential includes no connectors, Premium includes one, and each further connector is $29 a month.
There are two kinds of logs to keep apart. The logs you see in the Control Panel - gateway access, Threat Blocker and, on Premium, system and posture logs - are kept for 90 days on Essential and Premium, with custom retention on Enterprise.
GoodAccess itself keeps connection logs (when a member connects or disconnects) and session logs (the user's IP address, device type and data transferred), and says it does not store browsing history or user activity logs. It only says those service logs are kept for a limited period. The privacy policy also lists device UUID, hostname, OS, security settings and information about applications running on the device - which is what posture checks need, but worth knowing before you roll it onto personal phones.
On compliance, read the wording closely. The security page says GoodAccess is GDPR and HIPAA compliant and meets SOC 2 and ISO 27001 criteria. Homepage artwork goes further, with ISO 27001 Certified and SOC 2 badges, but no certificate or audit report was publicly available when we checked. If your auditors need a SOC 2 report or an ISO certificate, ask for the document before you sign.
The practical upshot: run the trial with your real apps and devices, because once you pay annually you have two weeks to change your mind and then you are committed for the year. The terms are governed by Czech law and courts.
GoodAccess s.r.o. is based in Ústí nad Labem in the Czech Republic and was founded in 2020 by Michal Čížek (CEO), Martin Čížek (CPO) and Jiří Hromádka (CTO). It reports more than 15,000 business users, around 35 employees and $2.2 million raised, including a $1 million seed round from Nation 1 in 2021. We found no acquisition or merger through 2026, which matters in a market where competitors keep being folded into larger platforms.
GoodAccess's edge is the combination: a dedicated static IP for whitelisting on every plan, plus Premium's access cards and posture checks, at public per-user prices a small business can plan around.
Pick Essential if your main problem is IP whitelisting for a team of five or more and you want DNS threat blocking on top. Pick Premium if you also need SSO, per-system access rules and device checks, or you have to connect an office or cloud VPC. Look elsewhere if you are a team of one or two that only needs a static IP, if contractors cannot install a client, or if you need a published SOC 2 report today.
At least $35 a month. Essential is $7 per user billed annually or $9 monthly, and Premium is $11 or $14, both with a 5-user minimum. Additional gateways are $49 a month each, and Enterprise is priced on request from 50 users.
No. The free Starter plan has been withdrawn and its page now returns an error. The only free option is a 14-day trial with no credit card required.
Yes, but you pay for 5 seats. Essential and Premium both have a 5-user minimum, so a two-person team still pays $35 a month on Essential annual.
Yes, on Windows. WireGuard was added in Windows app 4.8.0 on 2026-09-29. OpenVPN and IKEv2 remain the other supported protocols, and the macOS changelog does not yet list WireGuard.
Yes. Each gateway has a public IPv4 address dedicated to your team for as long as the service is prepaid. You can move the gateway to another location up to five times a month, and dedicated IPv6 addresses are not offered.
Connection and session metadata: connect and disconnect times, user IP address, device type and data transferred. GoodAccess says it does not store browsing history, and the logs admins see in the Control Panel are kept for 90 days on Essential and Premium.
Not provably. GoodAccess says it meets SOC 2 and ISO 27001 criteria, and its marketing art shows certification badges, but no certificate or audit report was public when we checked. Ask sales for the documents if you need them.
Only within 14 days of your first paid subscription period, and only if your payment method allows it. Renewals are not refundable, and purchases through a reseller follow the reseller's terms.
Three at the same time. Each GoodAccess user account can be connected on up to three devices simultaneously.
More in Virtual Private Network
Browse Virtual Private NetworkFor a team that already runs Entra ID or Google Workspace, SSO plus SCIM is the feature that most often justifies the $4 per user step up from Essential: users are provisioned and removed from the identity provider instead of by hand.