Choose the commercial model that fits your security team, from a managed workspace for day-to-day operations to enterprise deployment paths with dedicated governance and infrastructure control.
The hosted platform is designed for teams that want speed without giving up review, governance, or commercial clarity.
Hosted entry point for small teams that want to move quickly.
Built for teams making detection work part of a regular operating cadence.
For MDR, consulting, and internal security programs running the platform at team scale.
For organizations that need private deployment and tailored commercial terms.
Hosted plans are for organizations that want a managed workspace for generation, review, billing, and team operations instead of assembling that layer themselves.
Enterprise engagements are designed for organisations that need dedicated infrastructure, procurement support, and deployment options aligned to internal governance requirements.
A full research-to-detection run consumes more generation and validation work than lighter workflows. The credit model keeps pricing aligned to actual platform usage.
Submit a threat advisory and get synthetic telemetry, Sigma rules, and compiled SIEM queries ready for review.
Generate replayable attack telemetry from a threat source when detection content is not yet the priority.
Paste observed telemetry and get Sigma rules and compiled backend queries derived from what the logs show.
Check whether an existing SPL, KQL or EQL query fires on your logs and get a corrected version if it falls short.
Because not every workflow consumes the same amount of platform work. A full research-to-detection run requires materially more generation and validation than lighter validation-only use, so usage-based pricing keeps the model aligned to actual throughput.
Teams can move to a larger plan, add overage capacity, or work with us on a larger commercial package. The goal is to keep the entry tier accessible while still supporting teams that want this in a regular operating cadence.
Yes. The hosted platform handles the full detection engineering workflow - generation, simulation, validation, review, and export - through a managed workspace with team operations, billing, and governance built in. Enterprise deployment options are available for organisations that require dedicated infrastructure or custom data handling.
No. It is built to accelerate detection engineering, not to bypass analyst review. The value is earlier coverage with better evidence, clearer validation, and a more controlled promotion path into production tooling.
