Home / Pricing

Pricing by billable node

Plans differ in how many billable nodes they include and which modules come with them. Overage is billed in blocks of 10,000 nodes.

Plans

Trial

Free trial 14 days, then choose a plan

1,000 billable nodes included
No overage; upgrade above 1,000 nodes

Pro

$999 /mo

1,000 billable nodes included
No overage; upgrade above 1,000 nodes

Business

$2,999 /mo

25,000 billable nodes included
$1,250 per extra 10,000-node block, up to 100,000

Enterprise

$12,500 /mo

100,000 billable nodes included
$850 per extra 10,000-node block, up to 500,000

Enterprise Pro

$25,000 /mo

250,000 billable nodes included
$650 per extra 10,000-node block, up to 1,000,000

Gov / Fed / Large Enterprise

Custom by contract

By contract
Footprint and terms set by contract

Billing terms, overage measurement and support response times are set out in your order form — contact sales for details.

What counts as a billable node

A counted asset is something that runs or stores data. Everything else is still discovered, shown and scanned, just not counted. A resource that is rediscovered on every scan counts once. Deleted assets are not counted.

Counted

Compute: VMs, instances, containers, functions, clusters
Storage: buckets, volumes, file systems
Databases
Load balancers
NAT, VPN and transit gateways, peering, Direct Connect / ExpressRoute and cloud firewalls (they run traffic)
DNS zones
IAM roles, users and groups
KMS keys, secrets, certificates, log groups
SNS / SQS, WAF, CloudFormation stacks
Microsoft 365 users, mailboxes, sites and service principals your organization registered or consented to

Not counted (still discovered and scanned)

DNS records: a row inside a zone (the zone itself counts)
Routes: route tables, route entries, device routing tables
Security-service settings: for example the AWS Config recorder, GuardDuty detector, Inspector coverage, Security Hub hub
Network plumbing: subnets, VPCs / VNets / GCP networks, security groups / NSGs, NACLs, firewall rules, internet gateways, elastic IPs, DB subnet groups, VLANs
Account-wide settings and policies: IAM password policy, IAM account summary, IAM managed policies, Conditional Access, Teams settings, GCP IAM bindings
Containers that group resources: AWS accounts and organizations, Azure subscriptions and resource groups, GCP projects and folders, Microsoft 365 tenants
SQL Server records: instance and database records (the server itself counts)
Microsoft's own built-in Microsoft 365 apps

Detailed rules: asset counting in the docs ↗.

Three worked configurations

Base prices and overage rates are from the plan table below. Examples exclude add-ons and taxes.

Pro

600 billable nodes

600 is within the 1,000 included.

$999 per month, no overage.

Business

40,000 billable nodes

25,000 included. The remaining 15,000 fall in 2 blocks of 10,000 at $1,250 each = $2,500.

$2,999 + $2,500 = $5,499 per month.

A partial block is billed as a full block.

Enterprise

120,000 billable nodes

100,000 included. The remaining 20,000 are 2 blocks at $850 each = $1,700.

$12,500 + $1,700 = $14,200 per month.

Compare plans and modules

Add-on prices are per month and apply on top of the base plan, from the tier shown. Framework coverage differs by plan: Pro covers CIS and NIST; Business and above add federal, healthcare, financial and international frameworks.

Plan and module comparison
Plan	Trial	Pro	Business	Enterprise	Enterprise Pro	Gov / Fed / Large Enterprise
Plan and capacity
Base price	Free trial 14 days	$999 /mo	$2,999 /mo	$12,500 /mo	$25,000 /mo	Custom by contract
Included billable nodes	1,000	1,000	25,000	100,000	250,000	By contract
Overage per 10,000-node block	Not offered	Not offered	$1,250/mo	$850/mo	$650/mo	By contract
Node ceiling before custom contract	1,000	1,000	100,000	500,000	1,000,000	By contract
Framework coverage
Framework coverage	All frameworks	CIS + NIST	CIS, NIST + federal, healthcare, financial, international	CIS, NIST + federal, healthcare, financial, international	CIS, NIST + federal, healthcare, financial, international	CIS, NIST + federal, healthcare, financial, international
Discovery
Agentless cloud discovery (AWS, Azure, GCP, M365, DigitalOcean, Linode, OCI)	Included	Included	Included	Included	Included	Included
Network Intelligence Pack (10 vendors)	Included	Not available	Add-on $1,500/mo	Add-on $1,500/mo	Included	Included
Virtualization Pack (VMware, Windows/Hyper-V, SSH/WinRM)	Included	Add-on $499/mo	Add-on $499/mo	Add-on $499/mo	Included	Included
Container Intelligence Pack (Kubernetes, Helm)	Included	Add-on $499/mo	Add-on $499/mo	Add-on $499/mo	Included	Included
Identity Intelligence Pack (Active Directory, Okta)	Included	Add-on $499/mo	Add-on $499/mo	Add-on $499/mo	Included	Included
Enterprise Storage Pack (NetApp, Pure, Dell)	Included	Add-on $499/mo	Add-on $499/mo	Add-on $499/mo	Included	Included
Secrets & Policy Pack (Vault, OPA)	Included	Add-on $499/mo	Add-on $499/mo	Add-on $499/mo	Included	Included
Endpoint & DevSecOps connectors (CrowdStrike, GitHub)	Included	Not available	Not available	Included	Included	Included
Risk prioritization
Attack path analysis	Included	Included	Included	Included	Included	Included
Cloud identity entitlement analysis (CIEM)	Included	Not available	Included	Included	Included	Included
Risk prioritization scoring (TrueRisk)	Included	Not available	Included	Included	Included	Included
Zero Trust maturity scoring	Included	Not available	Not available	Included	Included	Included
Threat intelligence integration	Included	Not available	Not available	Included	Included	Included
MITRE ATT&CK / D3FEND mapping	Included	Not available	Not available	Included	Included	Included
Compliance & evidence
Federal compliance pack (CMMC, FedRAMP, STIG)	Included	Add-on $999/mo	Included	Included	Included	Included
Healthcare pack (HIPAA)	Included	Add-on $299/mo	Included	Included	Included	Included
Financial services pack (PCI DSS, SOC 2)	Included	Add-on $299/mo	Included	Included	Included	Included
International pack (ISO 27001, GDPR)	Included	Add-on $299/mo	Included	Included	Included	Included
Evidence engine (ATO evidence collection)	Included	Not available	Included	Included	Included	Included
GRC questionnaire workflow	Included	Not available	Included	Included	Included	Included
Attestation review workflow	Included	Not available	Not available	Included	Included	Included
POA&M management	Included	Not available	Not available	Included	Included	Included
Per-tenant rule overrides	Included	Not available	Not available	Included	Included	Included
FedRAMP ConMon deliverables	Included	Not available	Not available	Not available	Included	Included
Dynamic rule packs (YAML hot-reload)	Included	Not available	Not available	Not available	Included	Included
Engineering deliverables
Auto-documentation engine (SSP, DoDAF, MBSE, Terraform export)	Included	Not available	Add-on $1,999/mo	Included	Included	Included
Runtime SBOM	Included	Add-on $999/mo	Add-on $999/mo	Included	Included	Included
IaC governance	Included	Add-on $999/mo	Add-on $999/mo	Included	Included	Included
Configuration intelligence	Included	Add-on $1,499/mo	Add-on $1,499/mo	Included	Included	Included
Signed compliance reports	Included	Add-on $499/mo	Add-on $499/mo	Included	Included	Included
Deployment
Air-gapped / disconnected deployment	Not available	Not available	Not available	Add-on $2,500/mo	Add-on $2,500/mo	By contract

What the trial includes

The 14-day trial includes every module and framework except the air-gapped deployment add-on, up to 1,000 billable nodes. No overage applies during the trial.

Start a trial

Need something beyond a plan?

For air-gapped deployment, footprints above a plan ceiling, or Gov terms, ask for a scoped quote.

Request advanced capabilities

See it on your own questions

Look at the sample-data demo, run a 14-day trial, or ask for a technical walkthrough with an engineer.

Start a trial Explore the demo Book a technical walkthrough