Three packages built from the same platform. Pricing depends on the number of hosts, log volume and deployment model, so every quote is prepared for your environment.
Endpoint visibility, real-time detection and threat intel for teams starting their SOC.
Best for
Teams with a small IT or security staff and a single environment.
12 of 30 modules
Request a quoteAdds investigation, hunting, response and automation for teams running daily SOC operations.
Best for
SOC teams that investigate and respond in-house.
26 of 30 modules
Request a quoteThe full platform with AI SOC agents, compliance archives, multi-tenancy and the SOAR API.
Best for
Regulated organisations, large environments and MSSPs.
30 of 30 modules
Request a quoteModular by design
Every module is sold on its own. Start with the one you need today and switch on more later, with no reinstall and no data migration.
Runs in your own data centre. Logs and keys never leave your network.
We host and operate the platform; you use the console.
One installation, many tenants, billed per client.
| Module | Essentials | Professional | Enterprise |
|---|---|---|---|
| Detection & Response | |||
| Incident Management | |||
| Live Tail | |||
| Response Actions | — | ||
| Threat Hunting | — | ||
| Threat Map | |||
| Investigation & Forensics | |||
| Log Explorer | — | ||
| Case Management | — | ||
| Offline Investigation | — | ||
| AI Analysis | — | ||
| Endpoint Security | |||
| EDR Overview | |||
| Agents | |||
| Vulnerability Management | |||
| Device Inventory | |||
| Browser DLP | — | ||
| Kill Chain | |||
| Cyberloafing Analytics | — | ||
| Data & Integrations | |||
| Data Sources | |||
| XDR Connectors | — | ||
| Email Security | — | ||
| SOAR Integrations & API | — | — | |
| Threat Intelligence | |||
| Threat Intelligence Feeds | |||
| MITRE ATT&CK Coverage | — | ||
| Detection Rules | — | ||
| Risk Scoring & Exposure | |||
| Automation & AI | |||
| SOC Automation | — | ||
| AI SOC Team | — | — | |
| Reporting & Governance | |||
| Reports | |||
| Compliance | — | — | |
| Team Chat | — | ||
| Multi-Tenant Management | — | — | |
By package, number of protected hosts and log volume. Self-hosted and cloud deployments are priced differently. We prepare a written quote after a short call.
Yes. All packages run on the same platform, so moving up only switches on more modules. No reinstall, no data migration.
Yes. Individual modules such as Compliance or the AI SOC Team can be added to Essentials or Professional.
Yes. We run a pilot on a few of your hosts so you can see real detections before you decide.
Yes. Multi-tenancy is built in and we offer partner pricing for service providers.
A 30-minute walkthrough with an engineer, tailored to your environment.