Every plan runs on your own servers and is quoted for your estate. A suite always costs less than buying its modules one by one, so a suite is the better value when it fits; build your own when you need less or a different mix. No public prices.
For the team that has to prove the estate is compliant, and fix what is not.
For the team that watches the estate every day and acts on what it sees.
For the team that watches, proves, and investigates on the host.
Need less, or a different mix? Build your own
Every suite includes: review queue, evidence bundles, SIEM forwarding to Splunk, Sentinel and more, role-based access, four-eyes approval, two-factor sign-in, audit trail, all updates, and email support (next business day).
Sized for up to 30, 100, 500, 1,000 or 3,000 agents, or every host with a site licence. Each suite is sized on its own.
| Module | Comply | Operate | Complete | Build your own |
|---|---|---|---|---|
| Compliance and drift | choose | |||
| Hardening | choose | |||
| Scheduled reports | choose | |||
| Network discovery | choose 1 | |||
| Firewall review | choose | |||
| Log collection and detection | choose | |||
| File integrity monitoring | choose | |||
| Data loss prevention | choose | |||
| Forensics | choose | |||
| Active defence | choose 2 | |||
| Review queue | ||||
| Evidence bundles | ||||
| SIEM forwarding |
Pick exactly the modules you need. Every build includes the same base as the suites, is sized with the same tiers, and its licence carries exactly the modules you choose. A suite always costs less than buying its modules one by one, so build your own when you need less, or a different mix.
A single job delivered on the platform with an engagement licence: only the modules the job needs, a host limit, a work window, then a read-only close-out where you export the evidence and reports and the agents remove themselves.
| Engagement | Sizes | You receive |
|---|---|---|
| Compliance Assessment and Hardening | 25, 100 or 250 hosts | per-control, per-host report; evidence bundle for the auditor; hardening record with before-and-after results |
| Network Map | 500, 2,500 or 10,000 addresses | device inventory; topology; unknown and unmanaged devices |
| Firewall Review | 1 firewall, up to 5, up to 10 | any-any, shadowed and duplicate rules; cleanup plan |
| Network and Firewall Optimisation | 2,500 addresses and 5 firewalls | inventory and topology; rule-set findings; one combined report |
| Compromise Assessment | 50 or 200 hosts | findings report; forensic case with chain of custody; file integrity baseline |
| Audit Readiness | up to 100 hosts, ISO 27001 or PCI DSS | evidence mapped to controls; gap report; review session |
| Incident Response Retainer | 10 days within a year | incident timeline; containment record; forensic findings |