Pricing

Full Plans (Protect your Organisation)

These plans include access to all of our Microsoft Defender indicators and conditional access/named location feeds. These can be provided via our managed service or you have the option to self host (or a combination of both). To benefit from our Defender feed you require a P2 license from Microsoft.

For self hosted options we provide an ARM template which can be deployed as an Azure Logic APP, or you can write your own custom code and pull the curated data from our indicators and named location APIs.

Full plans also include full API access. The API is documented here, and provides the ability to:

• Query our entire dataset for keywords within a hostname

• Search for IP addresses

• Pull a detailed list of detections within the last 7 days

• Pull a list of indicators formatted ready for ingestion into Microsoft Defender indicators

• Pull a list of backend infrastructure in a format ready for direct ingestion in to a named location

Our full plans are suitable for organisations protecting their own users and systems, or systems/applications that they operate.

Pick Your Size

We price all of our plans upon the number of end users befitting from the service.

If you are protecting users within your Active Directory / Entra ID environment then this will be the average number of users that access your environment per month. If you are protecting a web application then this will be the average number of users that log in per month. (in both of these cases the average number of users per month may be lower than the total number of users).

Prices are quoted in GBP, however, we also bill in USD on request. Purchase in other currencies are also available when purchased via the Microsoft store.

Resale and Onward Distribution (Protect Multiple Organisations)

The sale, or onward distribution, of our feed outside of the purchasing organisation is not permitted without prior authorisation. If you intend to provide access to this feed or to utilise this feed to protect organisations, entities, users, or services other than those which you own and operate you require a “Protect Multiple Organisations” plan. You should contact us. These plans may also provide commercial benefits for your organisation. If you are unsure if this applies in your case then you should contact us to clarify.

We are actively seeking opportunities to enable MSSPs and other service providers to enhance their offerings to their end customers. We offer flexible options designed for all sizes and scales of MSSP and to ensure seamless integration with your preferred toolset.