Engagement minimums you can size from.
Each engagement is priced against scope, and ongoing programs are priced by in-scope endpoints. The numbers below are the published minimums and typical ranges; the largest and multi-entity programs move to a quote. We’ll honestly tell you which tier fits before you commit.
APT
Scoped, time-bound penetration engagements run by our AI agent. Three pricing tiers covering single assessments through enterprise programs.
Single assessment
A scoped engagement against a defined target. Suitable for first-time engagements, focused surface testing, or compliance-driven baseline.
- One scoped engagement, one operator mode
- Portal, API, and formal report deliverables
- On-demand retest within engagement window
- Findings exportable to your ticketing system
Variable-scope engagement
Engagement sized to your scope — from a single surface through multi-surface coverage spanning external, web/API, cloud, and internal/AD. Most engagements land here.
- All Starter capabilities
- Multi-surface scope across external, web/API, cloud, hybrid, internal/AD
- Operator-mode mix per surface
- Follow-on retests and validation cycles
Annual program
Unlimited testing within your authorized scope, priced by in-scope endpoints. For teams that test every release, not once a year. Larger and multi-entity scopes move to a custom quote.
- Unlimited engagements and retests within scope
- Scheduled and on-demand testing
- Full integration with your ticketing and SOC stack
- Priced by in-scope endpoint count
- —Per-engagement pricing reflects minimums and scales with scope: number of in-scope endpoints, surface mix, and operator-mode requirements.
- —Run three or more engagements a year and an annual program is both cheaper and unlimited within scope.
- —Retests are included — within the window on a per-engagement basis, and continuously under a program.
CAE
Ongoing adversary emulation against your authorized scope. Pricing tiers below; full capability documentation is shared during scoping.
Point engagement
A bounded continuous-emulation engagement against a defined scope.
- Scoped emulation campaign
- Detection feedback against your SOC telemetry
- Final report with detection-coverage analysis
Recurring program
Ongoing emulation across multiple surfaces, sized to your environment.
- All Starter capabilities
- Multi-surface, multi-playbook coverage
- Recurring emulation schedule
Custom program
Dedicated capacity, custom SLA, and integration with your SOC stack.
- All Scaled capabilities
- Dedicated agent capacity
- Custom SLA and emulation cadence
- Named delivery contact
- —CAE scope, cadence, and integration details are confirmed during the scoping conversation.
SHIELD
A remediation assistance retainer designed to pair with APT or CAE engagements. Purchase a discrete block of hours or commit to a multi-month retainer up to a twelve-month term. Sized to the remediation workload your environment generates.
Block of hours or multi-month retainer
Sized to your remediation workload. Common shapes include a small block of hours to close a specific set of findings, a multi-month retainer attached to an ongoing APT or CAE program, or a year-long engagement for organizations with limited internal remediation capacity.
- Scoping discussion at no cost
- Engineers working remediation directly against your environment
- Hours flex across hardening, implementation, and verification
- Paired with APT or CAE findings in the same portal
- Retainer terms up to twelve months
- —SHIELD is an add-on to an APT or CAE engagement; it is not sold as a standalone service.
- —Hours and retainer terms are priced after a scoping conversation that confirms the remediation workload and the right engagement shape.
Standard across all tiers.
We will recommend the right product, tier, or product mix for your situation before you commit.
Executive summary and technical report suitable for stakeholders, auditors, and customer-assurance teams.
Out-of-scope assets are configured as hard guardrails in the engagement agreement and enforced by the agent.
Destructive operations require human approval regardless of operator mode.
Get a scoped quote for your environment.
Scoping calls are free. We’ll give you an honest read on which product, tier, or combination fits your situation.