Pricing
Priced to the problem, not to a tier.
Security work scoped to what you need, with a fixed price agreed in writing, and ARIA becoming part of the ongoing verification loop.
Services
Fixed price after scoping
Every service engagement is priced after a scoping call, as a fixed price in a written proposal. Only available services can be booked; launching services take registrations of interest.
Core services
Cloud Security Assessment
Fixed price after scoping
AvailableBook a scoping callPenetration Testing (VAPT)
Priced at launch
LaunchingRegister interestRemediation & Hardening
Fixed price after scoping
AvailableBook a scoping callSecurity Retainer
Fixed price after scoping
AvailableBook a scoping call
Supporting services
DevSecOps & CI/CD Security
Fixed price after scoping
AvailableBook a scoping callCertification Technical Readiness
Fixed price after scoping
AvailableBook a scoping callSecure Cloud Engineering
Fixed price after scoping
AvailableBook a scoping callResilience Review
Fixed price after scoping
AvailableBook a scoping callCost & Security Review
Fixed price after scoping
AvailableBook a scoping call
Specialist services
Kubernetes Security
Priced at launch
LaunchingRegister interestAI / LLM Application Security Testing
On our roadmap
PlannedPCI DSS Technical Support
On our roadmap
PlannedISO 42001 Technical Security
On our roadmap
Planned
Scoping
Why there is no universal service price
Two cloud assessments can differ substantially in account structure, scope and the engineering depth they need. Scoping sets the price, so you pay for the work your environment actually requires.
What scoping looks at
- What you want to achieve, and by when
- Which clouds, and how many accounts, subscriptions or projects
- The size and structure of each environment
- What is in scope for assessment or testing
- How complex the remediation is
- How much hands-on engineering you need from us
Security Retainer
Ongoing security engineering, on a recurring fee
For teams that want security work to continue after the first engagement. Retainer scope and fee are agreed in writing.
Security Retainer
AvailableRecurring review, re-checks, drift fixes and periodic testing, so controls stay in place between audits.
Typically includes
- Recurring review of your cloud controls
- Re-checks and drift awareness
- Remediation support
- Verification of changes
- Security engineering access for questions and reviews
Re-checking and drift work grow as ARIA's capabilities launch.
Fixed price after scoping
ARIA with the retainer
LaunchingPlatform access is included with the Security Retainer as its capabilities launch.
Retainer customers get access to ARIA capabilities as each one reaches production. No separate ARIA fee applies within the retainer.
What is available in ARIAProduct
ARIA
Cloud control remediation and verification
Included with the Security Retainer
Platform access is included with the Security Retainer as its capabilities launch.
Standalone access
LaunchingStandalone packaging and pricing will be set with early pilot customers. No standalone price is published yet.
Talk to us about ARIAServices + ARIA
Buy one, or both
Service → ARIA
ARIA → Service
Where to start
Start from what you need
- “I need a security assessment”Cloud Security AssessmentAvailable
- “I have findings that need fixing”Remediation & HardeningAvailable
- “I need ongoing support”Security RetainerAvailable
- “I need DevSecOps or security engineering”DevSecOps & CI/CD Security / Secure Cloud EngineeringAvailable
- “I need a penetration test”Penetration Testing (VAPT)Launching
- “I want to discuss ARIA”Talk to us about ARIA
Availability
What the states mean
A current commercial offering you can buy today.
- Cloud Security Assessment
- Remediation & Hardening
- Security Retainer
- DevSecOps & CI/CD Security
- Certification Technical Readiness
- Secure Cloud Engineering
- Resilience Review
- Cost & Security Review
In active development or a controlled launch. Register your interest.
- ARIA
- Penetration Testing (VAPT)
- Kubernetes Security
A future capability on our roadmap. Not yet offered.
- AI / LLM Application Security Testing
- PCI DSS Technical Support
- ISO 42001 Technical Security
Where we work
India and the United Arab Emirates
Proposals are written for each customer. No regional price list is published.
India
Cloud security engineering for Indian SaaS, fintech and technology teams preparing for enterprise customer reviews, ISO 27001 or SOC 2 audits and regulator expectations.United Arab Emirates
The same engineering, scoping and approval model for UAE companies running on AWS and Microsoft Azure. Engagements are scoped and delivered remotely, with on-site work agreed per engagement.
What happens next
From scoping call to engagement
01
Scoping call
We talk through your cloud and what you need.
02
Environment and objective
We understand your environment and what a good outcome looks like.
03
Scope
We define what is in scope and what is not.
04
Deliverables
We confirm exactly what you will receive.
05
Proposal
You receive a written commercial proposal.
06
Engagement
Work begins once you accept the proposal.
FAQ
Pricing questions
Common questions
Why aren't all services shown with prices?
Can ARIA be purchased standalone?
Is ARIA included in the retainer?
Can I buy services without ARIA?
Can I buy ARIA without services?
Do you work with AWS, Microsoft Azure and Google Cloud?
Do you work with customers in India and the UAE?
Start with a scoping call.
Tell us about your cloud and what you need. You receive a written scope and a fixed-price proposal before any work starts.