Pricing · billing model

Per-node billing —
predictable, not by ingest

Aegis charges by the number of nodes you monitor, not by log volume — log as much as you like and the bill stays predictable. This page explains the model and what's included; we build an exact quote to suit your environment.

Per node, not per log No charge for ingest or retention Grow as needed
How the model works

One variable: how many nodes you monitor

Classic SIEM tools charge by the volume of data collected, so your bill grows every time you turn on more logging — right when you need it most. Aegis turns that around.

Per node, not per log

You pay by the number of systems under monitoring — log volume does not change the bill.

Log without limits

Turn on all relevant telemetry without fear that the price will jump.

Grow as needed

Add nodes when you need them; the package follows the size of your environment.

No hidden line items

No separate charges for ingest, retention or traffic overages.

What a "node" is: a node is a monitored system — a server, virtual machine, workstation or network device with an agent or integration. You pay by the number of such nodes, regardless of how many logs they generate.
What's included

Packages grow with you — from 5 nodes to MSSP

The packages are an indicative scope of capabilities by environment size. This page does not state amounts; we build an exact quote around your systems and service level.

CORE — up to 5 nodes

Essential SOC monitoring: agent monitoring, SIEM rules, automatic blocking and alerts. For small systems that want serious protection.

SOC — up to 15 nodes

Full SIEM, WAF (monitor/protect), multi-tenant RBAC and case management. For companies with their own IT and web applications.

SOC PRO — up to 30 nodes

Advanced correlation, FIM (file integrity), CIS baseline and vulnerability review for more demanding environments.

SOC + NIS2 — up to 50 nodes

Everything in SOC PRO plus a NIS2 readiness pack, audit-trail review and compliance reports.

MANAGED SOC — 50+ nodes

Our team monitors, tunes and escalates per SLA (8×5 / 12×5 / 24×7). You run the business.

MSSP — 100+ nodes

A white-label multi-tenant platform with partner tiers for security service providers.

The number of nodes indicates the approximate size of the package, not the price. Capabilities can be combined as needed.

Why per node

A predictable bill is also a security decision

When billing depends on log volume, companies start hesitating to log — turning off sources to cut costs. That's bad for security, because those very logs reveal the attack.

The per-node model removes that conflict of interest

Per-node billing means you can turn on all relevant logging without fear of the bill. More visibility without a penalty — and visibility is exactly why a SIEM exists.

No hidden line items

There are no separate charges for ingest, retention or traffic "overages". You grow by adding nodes when you need them, not when your traffic increases.

About pricing and certificates: we don't publish specific figures because every quote depends on the number of nodes, the service level (SLA) and scope; get in touch for a personalized quote. Aegis currently holds no certificates — ISO 27001 is in preparation.
Frequently asked questions

Pricing and model — frequently asked questions

Why are there no prices on the page? +
Because any figure without context would be misleading. A quote depends on the number of nodes, the service level (8×5 / 12×5 / 24×7) and the scope of modules. Tell us your environment and you'll get a concrete quote.
What exactly counts as a node? +
A monitored system — server, virtual machine, workstation or network device with an agent or integration. You pay per number of nodes, not per volume of logs.
Does my bill grow if I log more? +
No. Unlike per-ingest billing, the per-node model lets you increase logging without affecting the price. Your bill only grows if you add nodes.
Can I change the package as I grow? +
Yes. The packages are designed to grow with you — from 5 nodes (CORE) to an MSSP partnership with 100+ nodes. Options combine as needed.
RELATED

Keep exploring the platform

Request a quote for your environment

Tell us how many nodes you monitor and what service level you need — we'll put together a concrete quote and recommend a package. No obligation.

Odgovaramo isti radni dan · info@aegis.hr