The free plan never expires. The paid ones grow with you.
You pay per server per month, and the more servers you protect, the less each one costs. The table price is billed annually in advance; month to month with no commitment, 20% more.
Free
€0 forever, no cardTo really try it in production, with nothing held back where it matters.
- Full detection and containment
- Up to 3 servers
- All six planes at once: the request, the code being run, the file, the process, the network and the account's behaviour
- Signed updates and self-calibration
- Community support
Basic
€8.00 per server per month Down to €3.50 at volumeThe same engine, with no server limit and a console for your team.
- Everything in the free plan, with no server limit
- Operator panel: cases, active threats and protected surface
- Standard metrics for your monitoring
- Support with a service-level agreement
Pro
€14.00 per server per month Down to €7.00 at volumeFor when you have to respond, justify and file what happened.
- Everything in Basic
- Chained forensic case file, tamper-proof
- Exportable indicators and timeline
- Native feed into your SIEM: ECS for Elastic, CEF for ArcSight or Splunk
Fleet
€16.00 per server per month Down to €9.50 at volumeFor estates where the same attacker touches several servers.
- Everything in Pro
- Campaign correlation across servers
- Aggregated attack chain for the whole fleet
- Shared reputation and remote integrity verification
- From 26 servers
The bracket applies to the whole estate, not in steps: 300 servers on Pro are 300 × €10.00 = €3,000 a month, not a mix of brackets.
See the full price table by bracket
| Servers | Basic | Pro | Fleet |
|---|---|---|---|
| 1 – 3 | Free | ||
| 4 – 25 | 8,00 € | 14,00 € | — |
| 26 – 100 | 6,50 € | 12,00 € | 16,00 € |
| 101 – 500 | 5,50 € | 10,00 € | 14,00 € |
| 501 – 2.000 | 4,50 € | 8,50 € | 11,50 € |
| 2.001 + | 3,50 € | 7,00 € | 9,50 € |
Fleet requires at least 26 servers: below that there is no fleet to correlate. Channel terms are available for resellers, and above 2,000 servers the price is settled in the negotiation.
See it on your own data
Deploy the agent on three servers and leave it in observation mode. Within days you will have the figures for your own traffic: what it would have detected, what it would have contained and with how much noise. Turning on blocking is a later configuration change, and it is your call.