Every line below appears in the agreement you sign.
Comparing routes? The published tiers live under See plans.
The scope
One function absorbs the queue, the identities, the risks, and the evidence; one team runs it. What follows is the standing scope of every operated partnership, and nothing on it arrives later as a surprise line item.
The queue your company feels every day. Requests and incidents worked by named operators, each with an SLA clock your team can watch.
Joiners, movers, and leavers handled the day they happen. Every grant is requested, approved, and evidenced in one place.
A live register with owners and review dates. Your admins propose entries, and an operator confirms each one before it stands.
Control evidence collected on a calendar and kept current in the vault, ready for the next audit or the next customer review.
Endpoints and identity watched under the detection and response module, with extended coverage and severity-1 page-out. Staffed around-the-clock eyes-on-glass is a separately priced enterprise uplift, and we will not imply otherwise.
Framework programs run end to end under the compliance operations module: control calendar, evidence collection, and audit management.
The market math on the tool stack a function like this replaces lives on its own page, with a source and a date on every line. Read the math on the stack
Priced on their own line
Modules attach to the partnership and to the enterprise deployment. They price the same way the tiers do, and nothing here is quoted only after a discovery call.
$2,500/mo plus $25 per user
Extended coverage with severity-1 page-out, threat hunting, threat-intelligence enrichment, incident response run, and forensics readiness.
The honest part. Staffed around-the-clock eyes-on-glass is not in this band. It is an enterprise uplift, priced separately, and we will not sell it as included.
$2,000/mo plus $20 per user
The compliance function run as a service beyond the Assurance tier: framework program management, evidence operations, and questionnaire response at depth.
The honest part. Additional frameworks attach as their own line. The audit itself comes from an independent firm, and we sit on your side of the table while it runs.
Three bands
Fractional leadership in three bands. This is how a CISO, CIO, CTO, or CAIO arrives in the structure, and it carries AI governance oversight at no separate line.
Visibility
A function we run is still your function. Your team keeps a live view of everything we do, in the same portal our operators work from, for the life of the contract.
An illustrative sketch. The live portal, with real anonymized views, is on the platform page.
How the agreement works
The commercial shape is summarized in the term sheet above, and the published pricing lives on the plans page. How the agreement itself is put together, so none of the terms land as a surprise when the order form does.
Running a function well takes tenure, and the term is built for it. Multi-year options extend the same structure, cap included.
Headcount is counted at each quarter's close. Growth bills forward from the next quarter; nothing is retroactive and nothing is prorated behind you.
The maximum annual increase is a number printed in your agreement, fixed before you sign. You know the ceiling on renewal pricing going in.
A single implementation fee stands the function up: inventory, portal rollout, and the scoped first quarter you can read about below.
The bar under all of this is the same one under every Cloud Sentry plan: the platform, named operators, published flat pricing, and a written escalator cap. The partnership is simply the largest thing built on it.
Where our work ends
A partnership works when the boundaries are written down. These are the engagements that belong with another trade, and who we bring in for each.
Where it runs
Standard delivery is the hosted platform: we run it, patch it, and answer for it. When residency or procurement rules out shared infrastructure, the same platform is self-hosted, deployed single-tenant inside a cloud account you already own, AWS included. You keep the boundary; we keep the upgrade path, the patching, and 24/7 severity-1 page-out response.
A three-year engagement, from $100,000 a year, running in a cloud account you own and can grant us access to. We do not build air-gapped deployments, and we do not hand the platform over for your own team to run. If either of those is what you need, we will tell you on the first call rather than the fifth.
The engagement
Every partnership starts the same way and settles into the same rhythm. We tell you what we see on the first call, including whether the partnership is the wrong shape for you.
Fifteen minutes with an operations lead. We walk your current stack, size the user band from your real headcount, confirm BYOC qualification if you need it, and give you a plain read on fit.
Implementation runs as a scoped quarter with named owners and dates. Your operators are introduced by name, the portal goes live for your whole company, and the SLA clocks start where everyone can see them.
From the second quarter the partnership is a cadence. The queue is worked daily, evidence is collected on the calendar, and each quarter closes with a written review carrying the numbers behind every claim we make about our own performance.
Fifteen minutes with an operations lead. We walk your stack, size the user band, and tell you plainly if the partnership is the wrong shape for you.
Bring your renewal invoices and your headcount. We put real numbers into the structure on this page before anything gets signed.
Prefer to start smaller? The published tiers use the same grammar, a base operations fee plus a per-user rate, and the entry rung self-enrolls.
We use cookies
Essential cookies keep the site running. With your permission, we also use analytics and functional cookies to improve the experience. Read our Cookie Policy.
