Pricing

Published, because the alternative wastes your time

Real starting points for a typical mid-sized estate. What moves them is scope and complexity, never who you are.

Monthly Annual
Two months free on an annual commitment
Up to 150 endpoints

Watch

For an organisation starting a security programme, that needs to know what it is exposing before it decides what to defend.

€890 // per month

Exposure

  • Know what is internet-facing before an adversary maps it first
  • Hear about a leaked credential from us, not from whoever bought it

Reporting

  • A quarterly posture report your board can read without translation

Support

  • Qualified alerts in business hours, with a human on the other end
  • A shared channel, not a ticket queue
Book a scoping call
Most chosen

Defend

For an estate where downtime has consequences beyond a revenue chart. Continuous detection, contractual response, and offence that keeps the posture honest.

€2,490 // per month

Everything in Watch, plus

Detection

  • Someone is awake at 03:00 on a Sunday, in the European Union
  • Detections written against your own log sources, not a generic ruleset

Response

  • An analyst engaged within 30 minutes, written into the contract
  • A named lead who already knows your architecture when it matters

Assurance

  • Two offensive campaigns a year, so the posture is tested and not assumed
  • An annual tabletop that surfaces the decision nobody has made yet
Book a scoping call
Essential operators

Sovereign

For operators of vital importance and environments where the question is not only who can reach the data, but under whose jurisdiction it sits.

Bespoke // after scoping

Everything in Defend, plus

Sovereignty

  • A compartmented team that works on nothing else
  • SecNumCloud-qualified hosting, and no processing outside the EU

Governance

  • Crisis exercises run with your board, not around it
  • Regulatory support that continues between audits, not just before them

Presence

  • Analysts on your site for the phases that require it
Book a scoping call
One-off engagements

Fixed scope, fixed fee

No retainer required. Each of these includes the ninety-day re-test.

EngagementScopeDurationFrom
External penetration test Internet-facing perimeter 2 weeks €9,500
Internal penetration test Assumed-breach, lateral movement 3 weeks €14,000
Web application assessment Per application, authenticated 2 to 3 weeks €11,000
Red team engagement Objective-based, multi-vector 6 to 10 weeks €38,000
Cloud posture review Per provider, all accounts 3 weeks €15,000
ISO 27001 gap analysis Full Annex A coverage 3 weeks €12,000

What you are not risking

The scoping call is free

Thirty minutes, and no proposal is written before it. If we are the wrong people we say so on that call.

A re-test at ninety days

Included on every offensive engagement. Fixing a finding and never confirming the fix is how findings come back.

No auto-renewal trap

A term ends when it ends. You do not have to remember to give notice to avoid another year.

No metered surprises

No per-alert billing, no per-seat creep. The number you agreed is the number on the invoice.

FAQ

On the numbers

Why is pricing published at all?

Because the alternative wastes three meetings establishing whether we are in the same range. The numbers here are honest starting points for a typical mid-sized estate.

What moves the price?

Estate size, the number of distinct environments, regulatory scope, and whether testing has to run inside restricted change windows. Not the logo on the door, and not what we think you can afford.

What happens if we outgrow the plan mid-term?

We re-scope at the point it stops fitting, not at renewal. The difference is billed from that month forward — there is no back-billing for the period you were over, and no per-endpoint penalty.

Can we leave?

Retainers run twelve months, billed monthly or annually. There is no auto-renewal clause requiring notice to escape: at the end of a term it stops unless you say otherwise. One-off engagements have no term at all.

Do you discount?

An annual commitment is two months free, and that is shown in the toggle above. Beyond that, no — a discount for one client is a rate the next one is quietly overpaying.

Are we too small for this?

Below roughly fifty endpoints a retainer is usually poor value and we will say so on the call. A one-off external test is often the right first spend, and it is on the table above.

Where does our data live, and who can reach it?

Inside the European Union, with nothing subcontracted outside it. The full subprocessor list, our certifications and the two we do not hold are published in the trust centre.

Read the trust centre

Do you charge for the scoping call?

No. It exists so both sides can decide whether to proceed, which is not something you should be paying for.

Same call, whichever plan

Thirty minutes tells you more than this page

We establish whether we are the right people before anyone writes a proposal. If the answer is no, you get told on that call.

Book a scoping call