No opaque pricing, no surprise invoices. Ciberseg publishes reference rates for every package and SOC tier — then scopes the right fit with you in a free consultation, at no obligation.
Managed SOC with the AEGYS Pulse NDR sensor included. Pick the band that matches your end-user count — the SLA, the reporting and the escalation path all scale with it.
Entry
€1,788 / year
Popular
€4,188 / year
Recommended
€8,988 / year
Scale
€17,940 / year
Enterprise
€35,940 / year
Beyond 2,000 end users
Above 2,000 monitored end users we build the package around your estate rather than fitting you into a band. Send us the outline and you get a tailored proposal back.
All prices are net and exclude VAT. The AEGYS Pulse NDR sensor is supplied as a loan unit and returned at the end of the contract. Add-on prices scale with the agreed user and asset counts. Quotations are subject to a setup fee based on effort.
Every add-on books on top of your existing SLA — no separate contract, no second onboarding.
€0.50 / user / month
Guaranteed initial response within 30 minutes on critical (P1) alerts, around the clock.
From €99 / month
Continuous vulnerability assessment and scanning: asset discovery, CVE prioritisation and a monthly vulnerability report with recommended actions.
From €4 / endpoint / month
Endpoint detection and response: deployment, monitoring, alerting and active countermeasures on endpoints — vendor-independent (CrowdStrike, SentinelOne, Microsoft Defender and others).
From €149 / sensor / month
Network detection and response via the AEGYS Pulse sensor: extension to OT/ICS segments, additional sensors for multi-site estates and greater capture depth including payload analysis.
From €49 / month
Continuous monitoring of darknet forums and marketplaces for leaked credentials, company data, payment information and mentions of your domains and brands.
From €299 / month
Digital forensics and incident response on call: guaranteed response time in an emergency, forensic analysis, damage assessment and recovery support.
From €79 / month
Monthly or quarterly phishing campaigns, awareness measurement, click- and report-rate reporting and optional micro-training for at-risk staff.
Add-on prices scale with the agreed user and asset counts. Individual quotations on request.
These are contractual commitments, not aspirations. A demonstrated breach earns a service credit against your next invoice.
| SLA criterion | Starter | Business | Professional | Professional+ | Enterprise |
|---|---|---|---|---|---|
| AvailabilityMeasured per calendar month | 99.0 % | 99.5 % | 99.9 % | 99.9 % | 99.99 % |
| First response P1Standard per package. The First Response add-on brings this to under 30 minutes from Professional+ | 6 h | 4 h | 4 h | 2 h | 2 h |
| Escalation to customer P1Until reseller notification | Next business day | 8 h | 4 h | 2 h | 2 h |
| Reporting cadencePDF by e-mail | Monthly | Monthly | Weekly | Weekly | Weekly |
| SOC operating hoursMon–Fri 08:00–17:00, or around the clock | 8×5 | 8×5 | 8×5 | 24×5 | 24×7 |
| Data storageGDPR-compliant, no third country | Germany | Germany | Germany | Germany | Germany |
| GDPR data processing agreementArticle 28 GDPR | Included | Included | Included | Included | Included |
| NIS2 documentationEvidence-ready for authorities and audits | Baseline | Checklist | Full | Full | Full |
| SLA penalty (max.)On a demonstrated SLA breach, capped at 30 % of the monthly charge | 5 %/h, max. 30 % | 5 %/h, max. 30 % | 5 %/h, max. 30 % | 5 %/h, max. 30 % | 5 %/h, max. 30 % |
| Contract termTerminable quarterly; renews automatically by a further year unless cancelled one month before expiry | 12 months | 12 months | 12 months | 12 months | 12 months |
Above 2,000 end users the SLA is negotiated individually. All prices are net and exclude VAT.
The SIEM is your choice, not ours. Stellar Cyber and Wazuh run at the base package price; Microsoft Sentinel and Splunk carry an uplift on it.
AEGYS × Stellar Cyber
Open-source SIEM
Microsoft Azure SIEM
Enterprise SIEM
Every stack carries the same SLA per package, from Starter to Enterprise. The First Response add-on (+€0.50 / user / month) can be booked with any stack. On stacks 02–04 the NDR add-on starts at €149 / sensor / month.
Example: the Business package (€349 / month) on the Sentinel Stack = €349 × 1.30 = €454 / month; on the Splunk Stack = €349 × 1.50 = €524 / month. Prices exclude VAT.
From a no-commitment diagnostic to an ongoing embedded partnership — choose the commercial model that matches your procurement process and security maturity.
A 30–60 minute diagnostic session to identify needs and propose a path forward — at no cost.
Fixed scope, fixed price. Clear deliverables and a defined timeline for assessments, builds or audits.
Ongoing managed services, SOC monitoring or embedded advisory billed per month.
Combine cybersecurity, compliance and development at a preferential blended rate.
Half- or full-day sessions and cohort-based online courses for technical and executive audiences.
Annual software maintenance, platform support and patch-management agreements.
Not sure which model fits? A 30-minute scoping call is always free.
Request a scoping callEverything you need to know about getting started, data residency, flexibility and our standards alignment.
Have a question not covered here?
Ask us directlyBring your questions, your constraints and your goals. Our team will map the right combination of services, commercial model and budget — with no obligation and no pressure.
Always watching. Always protecting. Always ahead.