empowsec Plans, Seats, and True-Up Billing Explained

Billing surprises are one of the most frustrating aspects of managing a SaaS platform - especially for security tools that are often renewed under compliance pressure. An organization that adds five new employees, exceeds its seat count, and then receives an unexpected invoice at the end of the month has learned something useful about the billing model, but not in the way anyone would prefer. empowsec addresses this through a billing model that is transparent by design: plans bundle capabilities clearly, seat-based billing scales predictably, and a true-up process reconciles overages with advance notice rather than silent charges.

This article explains how plans and capabilities work in empowsec, how seat-based billing operates across monthly and yearly periods, how the true-up mechanism handles seat overages, and what notifications keep administrators informed before any charge occurs.

Plans and Capabilities: What Gets Unlocked

In empowsec, a plan is not just a pricing tier - it is a bundle of capabilities that gate specific features. The capabilities that plans control include: security awareness training, phishing simulation, interactive lessons, API access, white-label branding, and the reseller video library. This capability-based model means that what your organization can do in empowsec is explicitly defined by the plan you are on, and there is no ambiguity about whether a feature is included.

This approach also makes the upgrade conversation straightforward. If your organization runs basic training today and wants to add phishing simulations, you add the phishing capability. If your MSP wants to offer white-label training to clients, you add the white-label capability. The capabilities are additive, so you pay for what you use without buying a bundled tier that includes capabilities you do not need.

For resellers and MSPs, the capability model extends to client management: resellers can turn capabilities on or off per client company from their console. This means an MSP can offer basic training to smaller clients on limited budgets and full phishing plus API access to enterprise clients, all managed from a single reseller account. The capabilities enabled per client match exactly what those clients can access - no more and no less.

Seat-Based Billing: Monthly and Yearly

empowsec uses seat-based billing, where the price is determined by the number of active users on the platform. This is the most straightforward model for most organizations: as the headcount grows, the cost scales with it; as it shrinks, the cost can be adjusted at renewal. Billing is handled through Stripe, which manages secure payment processing and generates invoices that administrators receive through the billing notification system.

Billing periods can be monthly or yearly. Monthly billing offers maximum flexibility - you review and adjust seat counts each month and the bill reflects the current state of the organization. Yearly billing typically offers better unit economics in exchange for committing to a fixed seat count for the year, which suits organizations with stable headcounts and a preference for predictable annual budgeting.

For MSPs managing multiple client companies, the billing model extends to shared seat pools. Resellers allocate seats from their total pool to individual client companies, and can reallocate as client needs change. This pooled approach is more efficient than each client having isolated seat counts, because seats not yet assigned to a client remain available in the shared pool rather than sitting idle under a specific company.

Seat Overages and True-Up: How It Works

Seat limits in most billing models create a hard block: when you exceed your allocated seats, something stops working. This is administratively disruptive - exactly the wrong time for a security awareness platform to become unavailable, which is often when an organization is onboarding new employees and most needs the training infrastructure in place. empowsec takes a different approach: rather than hard-blocking when seat usage exceeds the plan, it allows the overage to occur and reconciles the difference through a true-up charge.

A true-up means the excess seats consumed during the billing period are calculated and charged at the end of that period. The overage is priced transparently and billed through the same Stripe infrastructure as the base subscription. The result is that growth is never blocked by a billing limit - an organization adding a cohort of new employees can onboard them into empowsec immediately, even if that temporarily puts them above their plan's seat count.

This model does require that administrators stay aware of seat usage so that overages do not accumulate silently over multiple periods. This is where the advance notification system becomes important: empowsec sends seat overage warning notifications when usage approaches or exceeds plan limits, and upcoming true-up preview notifications before a reconciliation charge is processed. These notifications ensure that the true-up is never a surprise - administrators know a charge is coming, understand why, and can make a plan adjustment before the billing period ends if they prefer.

Storage Overages for Media-Heavy Resellers

Resellers who use the video library capability can host custom training videos for their client companies. Video storage is a meaningful variable cost, and empowsec handles it with the same transparency as seat overages: storage limits apply per reseller, and usage above those limits can incur a storage overage charge. As with seat overages, the intent is to allow resellers to operate without being hard-blocked by storage limits while making sure they are not surprised by unexpected charges.

For most resellers, video library storage overages are a manageable concern rather than a routine event. The capability to retire videos and replace them with updated versions without rebuilding their details helps keep storage use efficient over time. Resellers who anticipate significant video library growth can plan their storage accordingly rather than discovering a limit only when it is reached.

Why Transparent Billing Matters for Compliance-Driven Buyers

Security awareness training is frequently purchased under compliance pressure - NIS2, ISO 27001, cyber insurance requirements, or sector-specific regulations often list documented training as a requirement. In this context, the billing model is not just a commercial consideration - it is an operational risk. If a billing surprise causes an organization to reduce training seats mid-year to control costs, the compliance evidence gaps in the resulting period are a real problem.

The empowsec approach - advance overage warnings, true-up previews, and no hard blocks on growth - is designed to keep the training program running through organizational changes rather than creating friction at exactly the moments when the organization is growing or changing. Administrators who receive clear advance notice of upcoming charges can make informed decisions about plan adjustments without disrupting the training program in the meantime.

For MSPs, the same transparency translates to their client relationships. When a reseller can show a client the true-up preview before a charge is processed, the conversation about seat adjustments happens proactively rather than reactively. This is the kind of billing experience that supports long-term client relationships, because it treats the client as a partner in managing costs rather than presenting them with a bill they did not see coming.

What This Means for Your Team

• Capability-based plans gate training, phishing, interactive lessons, API access, white-label, and the video library - so you pay for the features your organization actually uses.
• Seat-based billing through Stripe scales with your headcount across monthly or yearly billing periods, with resellers managing a shared seat pool across client companies.
• True-up billing allows seat usage to exceed plan limits without hard-blocking access - overages are reconciled at period end through a transparent charge rather than silently blocking new users.
• Seat overage warnings and upcoming true-up previews are sent in advance so administrators always know what charge is coming before it is processed.
• Storage overages apply to resellers with the video library capability, managed with the same transparent approach as seat overages.