Transparent starting points

Pay for verified security outcomes, not activity theatre.

We publish realistic entry prices and define the standard boundary. A written scope determines the final price before work is authorised.

The unit

One service day. Eight hours of expert work.

Everything below is the same unit bought on different terms. A service day is eight hours of AI-assisted operator time — the same unit the market calls a credit — and it buys the same work whichever way you pay for it.

€1,100 per day inside a subscription or day pack €1,400 per day for a single ad-hoc day Estimated in whole and half days before you approve Every day you spend is itemised against the work that used it
Offers

Three ways to start

Continuous packages remain design-partner pilots until the customer execution environment passes its readiness gates. Day packs are available now.

Design Partner Pilot

Watch

Continuous automated validation across a small verified estate, with every finding triaged by a person before you see it.

€1,290from / month
  • Up to 25 verified assets, validated weekly
  • 0.5 service days a month for triage
  • Operator-published findings, never raw scanner output
  • Executive and technical reports
  • Unused days carry one month
Explore Watch
Design Partner Pilot

Operate

The core tier: continuous validation plus a real balance of expert days to spend on the testing you actually need.

€4,900from / month
  • Up to 100 verified assets, validated daily
  • 4 service days a month, spent on your priorities
  • Attack plans, retests and remediation verification
  • Priority scheduling and richer reporting
  • About one mid-level security hire, for a whole team
Explore Operate
Available

Day Pack

Prepaid expert days, valid for twelve months. Spend them when a release, an audit or an investor asks — not on our schedule.

€1,100/ day · 10 or 25 days
  • Buy 10 or 25 days up front
  • Spend across web, API, cloud or internal scope
  • Days last the full twelve months
  • Includes the portal, live findings and retests
  • No monthly commitment
Explore Day Pack

All prices exclude VAT and are starting points. Final pricing depends on application complexity, authenticated roles, technologies, environments, change frequency, and required assurance depth. Annual commitments are discounted against the list day rate.

How you buy

Four purchase models, one meter

Different organisations budget differently, so the same delivery is available on the terms that fit. The portal, the findings stream and the retest loop are identical in all four — only how days arrive changes.

Monthly subscription

A fixed number of service days every month, at a fixed invoice.

Best when testing is part of how you ship: a predictable cadence, a predictable cost, and unused days carry one month so a quiet month is not wasted.

Compliance programmes and teams with a steady release rhythm.

Prepaid day pack

Buy 10 or 25 days up front and spend them across any scope for twelve months.

Best when demand is lumpy: a release, an audit, a new environment, a customer questionnaire. Days are not tied to a month, and they last the whole term rather than expiring each quarter.

Product teams shipping fast and organisations with irregular testing needs.

Annual commitment

A year of days agreed up front, discounted against the list day rate.

Best when the budget is annual. Same delivery, same portal — you are trading commitment for rate, and the discount is real rather than a padded list price.

Buyers with a yearly security budget and a known scope.

Fixed-price project

One scoped engagement, quoted as a number of days, no subscription.

Best for a first engagement or a one-off obligation. You still get the portal, the live findings stream and the retest — it is the same platform, bought once.

First-time buyers and single compliance deadlines.

Whichever you choose, you see the same balance: days granted, days spent, what spent them, and what carries forward. Nothing is consumed without an estimate you approved first.

Enterprise

Scope the environment you actually need tested

Enterprise is designed for requirements that should not be hidden inside a generic target count.

Internal network and cloud control planes Mobile applications and complex APIs Dedicated or region-specific engine pools Red-team objectives and custom deconfliction SSO, SCIM, ServiceNow, SIEM, and custom integrations Custom evidence retention and regional placement
Start with evidence

Turn the next security test into a continuous assurance programme.

Explore a read-only product tour, or tell us what you need to prove and we will scope it with you.