Pricing
One price per band. No per-seat arithmetic.
Each plan covers everything up to its seat count — same detection engine, same enforcement, same console on every plan. Larger estates and MSSP partners are priced on a call.
Add managed SOC Introductory
Our analysts triage your detections and tell you what to act on. +$1 per user while we learn real alert volumes — existing customers get notice before that changes.
Starter
Up to 25 users
$125 /month
includes managed SOC
A single office. One tenant, deployed by policy.
- Every detection rule and enforcement action
- Console with alerts, investigation and reporting
- Chrome, Edge and Brave
- Email support
Team
Most firms26 – 50 users
$250 /month
includes managed SOC
One firm that has outgrown a single office.
- Everything in Starter
- Per-domain exclusions
- Priority support
Growth
51 – 100 users
$450 /month
includes managed SOC
Multiple sites, still one organisation.
- Everything in Team
- Rule tuning for your environment
- Export for your SIEM
Scale
101+ users
Let's talk
Volume pricing
Larger estates, and anything with procurement.
- Everything in Growth
- Volume pricing
- Deployment support
- Named contact
Prices are per month, excluding tax. A plan covers any number of users up to its ceiling, so the rate per person improves as you fill a band. Bands are kept narrow deliberately — wide ones mean hiring one person can move you to a much larger bill.
Partners
Reselling to your own clients?
MSSPs and managed providers are priced wholesale per seat across the whole book, not per client, so a client base of many small firms does not price like many small deals. One console, one tenant per client, isolated data, and a new client deployed by policy in minutes. You take first-line support; we take detection tuning.
Become a partnerIncluded on every plan
There is no cut-down tier. The detection engine, the enforcement and the console are the same on Starter as on Scale — the bands are about size, not capability.
Detection
- ClickFix and clipboard hijack blocking
- Credential phishing and fake login pages
- Browser-in-browser windows
- Infostealer behaviour — cookie and storage access
- Malicious and sideloaded extension inventory
- Malicious download interception
- MITRE ATT&CK technique mapping
Enforcement
- Blocks in the page, before the action completes
- Navigation and download blocking
- Per-tenant rule toggles
- Per-domain exclusions
- Private browsing controls per browser
Console
- Alerts, triage and investigation
- Managed browser and agent inventory
- Fleet and coverage reporting
- PDF and CSV export
- Role-based access
Deployment
- Chrome, Edge and Brave
- Force-install by policy — no user action
- Credentials by managed storage, never typed
- Windows agent where there is no MDM
- Automatic rule updates, no reinstall
Questions we get asked
Why a package price instead of per user?
One number per band is easier to budget and quote than a figure that moves every time someone joins or leaves. It does mean a 12-person firm pays the same as a 25-person one — the price is set at the top of the band, so you get the best rate by filling it.
What counts as a user?
A person, not a device. Someone running Chrome on a laptop and Edge on a desktop is one user. Shared machines with no individual sign-in count as one user each.
What happens when we outgrow a band?
You move to the next one from the following billing period. Nothing stops working the moment you cross the line, and we will tell you rather than reprice you silently.
When can we pay by card?
Card checkout is being built. Until it ships, Starter, Team and Growth are set up by invoice — it takes one short email and you are running the same day. Nothing about the price changes.
What is in managed SOC?
Our analysts triage the detections your console raises, separate the real from the noise, and tell you what to do about the real ones. It sits on top of any plan. Introductory pricing while we learn how much alert volume a seat actually generates — if it changes, existing customers get notice, not a surprise invoice.
Which browsers does it support?
Chrome, Edge and Brave, on Windows and macOS. It is a Manifest V3 extension force-installed by policy, so it applies to managed profiles without the user installing anything.
How long does deployment take?
With existing Chrome policy management, minutes — push the force-install policy and the managed-storage configuration. Without an MDM, the Windows agent sets the same policies during install.
What does it send back?
Detection events only: the rule that fired, the hostname, a timestamp and the device. Pages that match no rule are never reported, and full page content, credentials and keystrokes are never collected. The privacy policy itemises this.
Does it replace our EDR?
No. It covers the part of an attack that happens before anything executes on the machine. Endpoint tooling still does its job afterwards; this reduces how often it has to.
Can we trial it?
Yes. Pilots run on a small group of real users, because a browser security product is only meaningfully testable against real browsing. Tell us the size and we will scope it.
Not sure which band?
Tell us roughly how many people and how you manage your browsers. If a smaller plan fits, we will say so.
Talk to us