Published prices.
No discovery call required.
This market quotes by request. That's not how it works here. Below are the numbers, the scope caps, the response windows, and the things that aren't for sale at any price — all before you talk to anybody.
2 retainers
Two clients at a time, one onboarding per quarter. Not a marketing device — it is the hour budget with the overhead counted. Ask what's open.
Read the work before you buy any of it.
Nothing on this screen needs an email address, a call, or a signature.
AEGIS
One command tells you what's actually exposed on a box. Runs on your machine, reports to you, phones nobody. Not published yet.
Any box you own
BASELINE
The self-hosted stack, one component per repository, publishing as each clears review. Monitoring, detection, identity, perimeter — Apache-2.0, no email wall.
1 host, 1 tenant
COURIER
What broke this week, what it means for a stack like yours, and what to actually do about it. No fear-mongering, no vendor press releases. Not running yet — issue one has not gone out.
Email, weekly
FOXHOLE
The fleet version, forked into your own org. Multi-node, multi-tenant, and maintained — for people running this for more than themselves.
1 org · unlimited seats · 60 hosts
SILENT UPGRADE
Your stack stops rotting. One tested patch train a month, and you only hear about the advisories that are actually yours.
25 hosts · +$28/host
Start with a fixed fee, not a commitment.
Problems arrive as events, not subscriptions. Both of these are flat-fee, both credit toward a retainer if you want one after, and neither requires you to decide anything today.
- Fixed fee · two weeks
TAKEOVER SPRINT
Two weeks on one environment you inherited. At the end you know what's in there, it's patched, it's watched, and it's written down.
The fastest way in. No monthly commitment, and it credits toward one
$3,500one environment · flat- Term
- 2 weeks
- Scope cap
- 1 environment · 2 weeks · flat fee
What you receive- Full aegis and a written map of the environment
- Every critical gap closed, or documented with the reason it wasn't
- Detection deployed and tuned to something you'd actually read
- A handoff document your own people can work from
- A fixed fee agreed before it starts, and never adjusted after
- Fixed-scope engagement
RECON
The full estate mapped, not just one box. Every retainer starts here or with a sprint — the alternative is guessing at your network and charging you for the guess.
Bigger than one environment. A sprint maps one environment; this maps the whole estate and comes back with a plan and a deployment shape. Nobody gets a monthly commitment without one of these two first, because the alternative is guessing at your network and charging you for the guess.
$6,500fixed fee · 2–3 weeks- Term
- 2–3 weeks
- Scope cap
- Up to 40 hosts across 3 environments
What you receive- Full aegis of the infrastructure and configs, documented
- A written architecture map with a diagram, in your repo
- Every gap ranked by what would actually hurt, with hours attached
- The stuff you inherited and nobody understands — explained
- A deployment plan: your metal, your cloud, or a mix
- A 30-day channel afterward for the questions the report creates
Four ways to work together.
Whoever you meet on the call is who does the work, at every tier. The difference is how much of your infrastructure we touch — and one of these tiers touches none of it.
4business hours
to acknowledge a triage request
- Clock runs
- 09:00–18:00 ET, Mon–Fri
- If we miss it
- 5% of the monthly fee per missed acknowledgment
Published in OUTPOST's terms and inherited by every tier above it.
- OUTPOSTUp to three environments$2,750per month · 3-month minimum3 environments · 30 hosts · +$750/environment
- STRONGHOLDFleet + pipeline$7,500per month · 6-month minimum · $75,000/yr prepaid12 environments · 120 hosts · +$650/environment
- PAPER TRAILFixed-fee program · 90 days$24,000fixed feeAdd-on to any retainer
OUTPOST
$2,750One environment, run properly. The stack deployed, watched, patched, and documented — so the thing you inherited stops being a liability.
- Term
- Monthly · 3-month minimum
- Scope cap
- 3 environments · 30 hosts · +$750/environment
A handful of environments and no security person. Absorbed overhead against one avoided loss
What's included- DEAD RECKONING — the living map of what's running and why
- SILENT UPGRADE — the tested monthly patch train
- Detection deployed and tuned until the alerts mean something
- Triage acknowledged within 4 business hours, 09:00–18:00 ET, Mon–Fri
- Monthly 60-minute working session, recorded if you want it
- 4 directed hours a month, tracked and shared
ENCLAVE
$4,500Every environment you run for someone else, on one invoice. Patched on the same train, watched by the same rules, documented to the same standard.
- Term
- Monthly · 3-month minimum
- Scope cap
- 6 environments · 60 hosts · +$700/environment
An agency holding other people's infrastructure. $750 per environment — resells at a normal care-plan markup
What's included- Everything in OUTPOST, across up to 6 client environments
- NIGHTWATCH — detection across the fleet, so you hear it before your client does
- One patch train covering every environment, not five separate scrambles
- Findings written so you can forward them to a client unedited
- Answers for the security questions your clients ask you
- 8 directed hours a month · bi-weekly working session
STRONGHOLD
$7,500Everything in ENCLAVE, plus the build pipeline and the weird stuff — air-gapped segments, plant networks, and the environments nobody else will touch.
- Term
- Monthly · 6-month minimum
- Scope cap
- 12 environments · 120 hosts · +$650/environment
A real fleet, or environments that get strange
What's included- Everything in ENCLAVE at double the environment and host cap
- Signed builds, SBOM, secrets scanning, and policy gates in your pipeline
- Network segmentation for air-gapped or industrial environments
- Architecture documentation your clients can be shown directly
- Framework mapping if a client demands one — capability, not identity
- 14 directed hours a month · in your channel daily
PAPER TRAIL
$24,000The full written record — architecture, controls, evidence, and the answers to whatever questionnaire is blocking your deal. Authored once, against the stack that's actually running.
- Term
- 90 days
- Scope cap
- Add-on to any retainer
A deal or renewal blocked on paperwork nobody has written
What's included- Architecture and control documentation across the whole estate
- Evidence mapping — the artifact for every claim, dated and hashed
- The answer library for client and insurer questionnaires
- Framework mapping on request, if a customer is demanding one
ENCLAVE is $4,500 a month. One full-time security engineer with this scope costs a multiple of that over a year, takes months to hire in a market short of them, and takes the runbooks with them when they leave. When you do hire someone, they inherit a documented stack in your own repository instead of onboarding onto nothing.
The four things money can't buy here.
Stated here rather than discovered on a call.
- Round-the-clock human coverage. Detection runs continuously; we don't. We can't honour a 3am promise, and you'd find out at the worst possible moment.
- Certification or audit sign-off. We'll help you meet a framework; we'll never be the ones attesting that you did. Nobody who implements a control gets to certify it, and that includes us.
- More than 12 environments or 120 hosts. Past that it gets referred out to someone with a bench.
- A report followed by silence. That is the thing we exist to be the opposite of.
Everything a procurement review would ask for.
13 clauses in 5 groups, published in full before anyone asks. This is the shape of them — the record itself has its own page.
- 01Commitment4
- How an engagement starts, what the first ninety days look like, and how you leave. Nothing here locks you in, because a practice with no track record hasn't earned the right to.
- 02Money3
- What you pay, how you pay it, and the only circumstances under which the number moves. Every rate on this page is stamped and changelogged.
- 03Beyond the retainer2
- Work that sits outside the monthly fee, priced in the open. Nothing here is ever auto-billed — it takes your written approval first, every time.
- 04Accountability2
- What it costs us when we miss, and the hard cap that stops us overselling the hours we have. A response window with no remedy attached is just a marketing number.
- 05Ownership2
- What is yours during the engagement and what stays yours after it. Leaving is supposed to be easy — that is the entire point of owning your own stack.
Not ready for a call? Start with the repo.
Apache-2.0, complete for one host, and the audit tool runs on your machine and reports to you. Nothing is sent anywhere. If it tells you something useful, you know where to find us.
All prices are per organization and do not change when you add machines. Every price on this page is stamped Pricing v2026.08.