Same platform. Different amount of work on your desk.
We do not hold features back to sell you a bigger tier. Every plan can run every capability. What the three plans differ on is who does the running, and that is the honest question, because the tooling is rarely what an organisation is short of. Two things are people rather than software: evaluating the organisation and training its staff. Those are sold beside any plan, so nobody pays for them twice or assumes they came free.
Essentials
The full protection platform, set up with you and run by your own people, with the evaluation and training bought alongside it if you want them.
- The whole platform: gateway, endpoints, intelligence, evidence
- Onboarding consultation: your estate assessed and the rollout planned
- Your registers, pre-filled from what the platform observes, kept by your team
- Organisation Evaluation and Staff Training available alongside, priced separately
Lowest cost · most hands-on for you
Explore EssentialsCustom
Start from what you actually need. Any combination of capabilities, any division of the work, priced for the shape you are.
- Pick the capabilities you need and leave the ones you already have
- Works alongside your existing tools rather than demanding replacement
- Choose what we run and what your team runs, capability by capability
- Scope, support hours and review cadence agreed rather than assumed
Shaped around you · priced to the scope
Explore CustomComplete
We take on the security function: the platform, the operations, the paperwork and the accountability trail, to a defined standard. Evaluation and training are part of it, not extras.
- We operate the platform and maintain your registers with you
- A named virtual CISO, management reporting and board-level briefings
- The organisation evaluated on the way in and re-evaluated every year
- Your people trained, measured and retrained, with the record kept for you
- A Security Operations Centre watching 24 hours a day, 365 days a year
- Full incident lifecycle, including regulatory notification to the deadline
- Independent review, crisis exercises and audit support, to an agreed service level
Highest touch · lowest effort for you
Explore CompleteWhere the line falls
Who does what, plan by plan. Everything below is a real division of labour, not a feature checklist.
| Essentials | Custom | Complete · vCISO | |
|---|---|---|---|
| The platform itself | All of it | The products you pick | All of it |
| Rollout | We plan it with you, you deploy | Agreed per scope | We deploy and configure |
| Day-to-day operation | You | Split how you like, per capability | Us |
| Consultation | Onboarding assessment included | Scoped with you | Continuous, with a named vCISO |
| Staff & crew training | Bought alongside, priced per person | Bought alongside, priced per person | Included, plus crisis exercises |
| Retraining & effectiveness review | On the cadence you buy, or none | Your choice of cadence | Quarterly, plus an annual independent review |
| Organisation evaluation | Bought alongside, once and then annually | Bought alongside, once and then annually | Included on the way in, and every year after |
| Compliance registers | Yours to maintain, pre-filled by the platform | Yours, or ours, agreed | We maintain them with you |
| Incidents | Detected and drafted; you file | Agreed per scope | We run the lifecycle and file to the deadline |
| Support | Business hours | Hours and response agreed | Defined service level, with a line answered out of hours |
| Security Operations Centre | Not included | Can be included | 24 hours, 365 days a year |
| Who signs the attestation | You | You | We sign ours alongside yours |
On accountability. NIS2 places the duty on your management body and that cannot be outsourced: no supplier can take it, and any who says otherwise is selling you something they cannot deliver. What Complete does is make sure the work behind those signatures is genuinely done, evidenced, and defensible if it is ever tested.
Delivered by us, beside any plan
Two things on this list are not software and are not a tier: they are people's time. They can be bought on their own, added to a plan, or, on Complete, are already part of what we carry.
Ready-made packages
Common shapes, so you do not have to start from a blank list. Each one is a real, applied configuration, so pick the nearest and change it.
Per environment Priced by site
Complete platform
The full NIS2 / IMO platform for an estate behind our gateway, run with us, remote access through the site's own gateway.
Router only
Connectivity, failover and traffic priority, without the firewall.
Firewall + Router
Connectivity and the next-generation firewall, nothing else.
Network Security
Gateway, firewall, on-the-wire threat detection and network discovery.
Endpoint Protection
The full endpoint suite on the machines behind the gateway: inventory, execution control, network guard, media, drivers and backup.
Vulnerability Management only
Installed-software vulnerability analysis, standalone.
Compliance & Governance only
The NIS2 / IMO register suite and identity management, without the network products.
Remote Support (via gateway)
Recorded browser desktop and terminal sessions relayed by the site's gateway.
Per endpoint Priced by machine
Complete endpoint protection
Everything a machine can carry without a gateway: inventory, execution control, network guard, media, drivers, backup, vulnerabilities and patching.
Endpoint security, no gateway
Execution control and outbound guard on the machines themselves, for sites with no gateway of ours.
Inventory and vulnerabilities
What is installed on each machine, and which of it has publicly known holes.
Remote Support (cloud, gateway-free)
Recorded browser desktop sessions carried by the agent itself, for sites with no gateway.
Next-Gen Cloud Firewall Priced by instance
Complete cloud firewall
Firewall, deep inspection with threat-intelligence enforcement, and discovery of what is behind it.
Firewall and threat detection
The next-generation firewall with inspection of the traffic passing through it.
Cloud firewall
The next-generation firewall and the routing under it, nothing else.
Staff & Crew Training Priced by person
Complete programme
A baseline for everybody, training assigned by role, and retraining for whoever needs it.
Annual renewal
Skills re-evaluated, training kept current, and retraining where the results point.
Training only
Role-appropriate security awareness training, recorded per person.
Evaluation only
A one-off measure of what each person already knows.
How pricing works
We do not publish a per-seat figure, because the honest answer depends on things a price list cannot see: how many sites or vessels, how many machines, how narrow the links are, whether the compliance work is yours or ours, and how much of the operation you want to keep.
What we will do is give you a fixed, itemised quote against a specific scope, with the products listed by name so you can see exactly what you are paying for and what you are not. If part of it would not help you, we will say so, because a customer who bought things they did not need is a renewal we do not get.
Tell us the shape and we'll price it
Sites, vessels, machines, obligations, and who you have to run it. That is enough for a real quote rather than a range.