Contact us
Plans

Same platform. Different amount of work on your desk.

We do not hold features back to sell you a bigger tier. Every plan can run every capability. What the three plans differ on is who does the running, and that is the honest question, because the tooling is rarely what an organisation is short of. Two things are people rather than software: evaluating the organisation and training its staff. Those are sold beside any plan, so nobody pays for them twice or assumes they came free.

You drive · we give you the rails

Essentials

The full protection platform, set up with you and run by your own people, with the evaluation and training bought alongside it if you want them.

  • The whole platform: gateway, endpoints, intelligence, evidence
  • Onboarding consultation: your estate assessed and the rollout planned
  • Your registers, pre-filled from what the platform observes, kept by your team
  • Organisation Evaluation and Staff Training available alongside, priced separately

Lowest cost · most hands-on for you

Explore Essentials
vCISO · we run it

Complete

We take on the security function: the platform, the operations, the paperwork and the accountability trail, to a defined standard. Evaluation and training are part of it, not extras.

  • We operate the platform and maintain your registers with you
  • A named virtual CISO, management reporting and board-level briefings
  • The organisation evaluated on the way in and re-evaluated every year
  • Your people trained, measured and retrained, with the record kept for you
  • A Security Operations Centre watching 24 hours a day, 365 days a year
  • Full incident lifecycle, including regulatory notification to the deadline
  • Independent review, crisis exercises and audit support, to an agreed service level

Highest touch · lowest effort for you

Explore Complete

Where the line falls

Who does what, plan by plan. Everything below is a real division of labour, not a feature checklist.

  Essentials Custom Complete · vCISO
The platform itself All of it The products you pick All of it
Rollout We plan it with you, you deploy Agreed per scope We deploy and configure
Day-to-day operation You Split how you like, per capability Us
Consultation Onboarding assessment included Scoped with you Continuous, with a named vCISO
Staff & crew training Bought alongside, priced per person Bought alongside, priced per person Included, plus crisis exercises
Retraining & effectiveness review On the cadence you buy, or none Your choice of cadence Quarterly, plus an annual independent review
Organisation evaluation Bought alongside, once and then annually Bought alongside, once and then annually Included on the way in, and every year after
Compliance registers Yours to maintain, pre-filled by the platform Yours, or ours, agreed We maintain them with you
Incidents Detected and drafted; you file Agreed per scope We run the lifecycle and file to the deadline
Support Business hours Hours and response agreed Defined service level, with a line answered out of hours
Security Operations Centre Not included Can be included 24 hours, 365 days a year
Who signs the attestation You You We sign ours alongside yours

On accountability. NIS2 places the duty on your management body and that cannot be outsourced: no supplier can take it, and any who says otherwise is selling you something they cannot deliver. What Complete does is make sure the work behind those signatures is genuinely done, evidenced, and defensible if it is ever tested.

Delivered by us, beside any plan

Two things on this list are not software and are not a tier: they are people's time. They can be bought on their own, added to a plan, or, on Complete, are already part of what we carry.

Ready-made packages

Common shapes, so you do not have to start from a blank list. Each one is a real, applied configuration, so pick the nearest and change it.

Per environment Priced by site

Complete platform

The full NIS2 / IMO platform for an estate behind our gateway, run with us, remote access through the site's own gateway.

Router & Connectivity Firewall & Filtering Guest Access & Vouchers Maritime Positioning Remote Shell Threat Detection (network) Network Discovery Endpoint Agent Asset & Software Inventory Zero Trust AV Network Guard Removable Media Control Driver Control Endpoint Backup Remote Desktop (via gateway) Vulnerability Management Threat Intel & Lookups Fleet Management Patch Management Notifications & Alerting Managed Compliance (vCISO) Identity & Access
Open in the builder

Router only

Connectivity, failover and traffic priority, without the firewall.

Router & Connectivity
Open in the builder

Firewall + Router

Connectivity and the next-generation firewall, nothing else.

Router & Connectivity Firewall & Filtering
Open in the builder

Network Security

Gateway, firewall, on-the-wire threat detection and network discovery.

Router & Connectivity Firewall & Filtering Threat Detection (network) Network Discovery
Open in the builder

Endpoint Protection

The full endpoint suite on the machines behind the gateway: inventory, execution control, network guard, media, drivers and backup.

Endpoint Agent Asset & Software Inventory Zero Trust AV Network Guard Removable Media Control Driver Control Endpoint Backup
Open in the builder

Vulnerability Management only

Installed-software vulnerability analysis, standalone.

Vulnerability Management
Open in the builder

Compliance & Governance only

The NIS2 / IMO register suite and identity management, without the network products.

Compliance & Governance, self-run (NIS2 / IMO) Identity & Access
Open in the builder

Remote Support (via gateway)

Recorded browser desktop and terminal sessions relayed by the site's gateway.

Router & Connectivity Endpoint Agent Remote Desktop (via gateway) Remote Shell
Open in the builder

Per endpoint Priced by machine

Complete endpoint protection

Everything a machine can carry without a gateway: inventory, execution control, network guard, media, drivers, backup, vulnerabilities and patching.

Endpoint Agent Asset & Software Inventory Zero Trust AV Network Guard Removable Media Control Driver Control Endpoint Backup Vulnerability Management Threat Intel & Lookups Patch Management
Open in the builder

Endpoint security, no gateway

Execution control and outbound guard on the machines themselves, for sites with no gateway of ours.

Endpoint Agent Zero Trust AV Network Guard
Open in the builder

Inventory and vulnerabilities

What is installed on each machine, and which of it has publicly known holes.

Endpoint Agent Asset & Software Inventory Vulnerability Management
Open in the builder

Remote Support (cloud, gateway-free)

Recorded browser desktop sessions carried by the agent itself, for sites with no gateway.

Endpoint Agent Remote Desktop (cloud direct)
Open in the builder

Next-Gen Cloud Firewall Priced by instance

Complete cloud firewall

Firewall, deep inspection with threat-intelligence enforcement, and discovery of what is behind it.

Router & Connectivity Firewall & Filtering Threat Detection (network) Network Discovery
Open in the builder

Firewall and threat detection

The next-generation firewall with inspection of the traffic passing through it.

Router & Connectivity Firewall & Filtering Threat Detection (network)
Open in the builder

Cloud firewall

The next-generation firewall and the routing under it, nothing else.

Router & Connectivity Firewall & Filtering
Open in the builder

Staff & Crew Training Priced by person

Complete programme

A baseline for everybody, training assigned by role, and retraining for whoever needs it.

Initial Skills Evaluation Security Awareness Training Retraining & Skills Re-check
Open in the builder

Annual renewal

Skills re-evaluated, training kept current, and retraining where the results point.

Periodic Skills Re-evaluation Security Awareness Training Retraining & Skills Re-check
Open in the builder

Training only

Role-appropriate security awareness training, recorded per person.

Security Awareness Training
Open in the builder

Evaluation only

A one-off measure of what each person already knows.

Initial Skills Evaluation
Open in the builder

How pricing works

We do not publish a per-seat figure, because the honest answer depends on things a price list cannot see: how many sites or vessels, how many machines, how narrow the links are, whether the compliance work is yours or ours, and how much of the operation you want to keep.

What we will do is give you a fixed, itemised quote against a specific scope, with the products listed by name so you can see exactly what you are paying for and what you are not. If part of it would not help you, we will say so, because a customer who bought things they did not need is a renewal we do not get.

Tell us the shape and we'll price it

Sites, vessels, machines, obligations, and who you have to run it. That is enough for a real quote rather than a range.