Ubuntu Pro is Canonical's subscription for organisations running Ubuntu Long Term Support (LTS). Its clearest technical distinction is the scope and duration of security maintenance. A standard Ubuntu LTS release receives five years of security maintenance for packages in the Main repository. According to the Ubuntu release guidance, Pro adds Expanded Security Maintenance for Main beyond that period and for Universe packages across the LTS lifecycle.
That difference matters to teams keeping servers or workstations on an LTS release for years. It does not remove the need to identify where their packages came from, apply updates or plan an eventual release upgrade.
What changes in package coverage
Canonical describes two Expanded Security Maintenance streams in its Ubuntu Pro service overview. ESM-infra extends security maintenance for Main packages from five to ten years after an LTS release. ESM-apps adds security maintenance for packages in Universe during that ten-year window. The lower-scope Pro infra-only tier excludes ESM-apps, so the distinction between the tiers is material if a fleet depends on Universe packages.
Operators can run pro security-status to inspect package origins and available ESM fixes on a representative machine. That result is more useful than assuming every installed dependency has the same coverage. The documented ESM streams concern packages in Ubuntu's repositories; software installed from third-party sources needs its own maintenance assessment.
Livepatch does not replace normal updates
Ubuntu Pro also includes Livepatch, which Canonical says can apply fixes for high- and critical-severity kernel vulnerabilities while a supported system is running. Its Livepatch guidance is explicit that administrators should still install normal kernel updates, including fixes that cannot be live patched, and reboot into an updated kernel when planned. Livepatch can defer some unplanned restarts; it is not a promise that a machine never needs one.
The service list also includes management and hardening tools, but availability and configuration depend on the Ubuntu release and subscription. The Pro status documentation distinguishes a service that is available on a machine, one that the subscription entitles it to use, and one actually enabled. Those are different operational states.
Support and cost are separate decisions
Ubuntu Pro's security-maintenance subscription is not the same decision as buying a human support contract. Canonical offers additional weekday or 24/7 support options, with coverage varying by tier, as its support overview explains. A team that needs a contractual response to production incidents should check the support terms rather than infer them from access to updates.
Canonical's published pricing distinguishes workstations, servers and public-cloud usage; cloud charges are metered through the provider. It also lists a free personal option for up to five machines. The final cost and entitlement depend on the deployment and support choice, so a fleet comparison needs the relevant quote or cloud price, not a single headline rate.
What to check before subscribing
- Identify each machine's LTS release and compare its standard-maintenance end date with the planned upgrade date.
- Inventory Main, Universe and third-party packages on representative systems, then check which ESM fixes matter to that inventory.
- Use
pro statusto confirm service entitlement and state for the actual release and machine type. Canonical's attachment guide shows that some services are enabled on attachment while others need a further step. - Compare the required security coverage, operational support and machine or cloud billing model against the organisation's existing patch and upgrade process.
For a fleet that can upgrade on schedule and relies only on packages covered by standard maintenance, the extended Main window may not be the deciding factor today. Universe coverage, Livepatch or a support contract may change that assessment. The useful choice starts with the fleet's real package inventory and maintenance plan.
