Skip to main content

Pricing

Priced to the problem, not to a tier.

Security work scoped to what you need, with a fixed price agreed in writing, and ARIA becoming part of the ongoing verification loop.

Services

Fixed price after scoping

Every service engagement is priced after a scoping call, as a fixed price in a written proposal. Only available services can be booked; launching services take registrations of interest.

Core services

Supporting services

Specialist services

  • Kubernetes Security

    Priced at launch

  • AI / LLM Application Security Testing

    On our roadmap

    Planned
  • PCI DSS Technical Support

    On our roadmap

    Planned
  • ISO 42001 Technical Security

    On our roadmap

    Planned

What each service includes

Scoping

Why there is no universal service price

Two cloud assessments can differ substantially in account structure, scope and the engineering depth they need. Scoping sets the price, so you pay for the work your environment actually requires.

What scoping looks at

  • What you want to achieve, and by when
  • Which clouds, and how many accounts, subscriptions or projects
  • The size and structure of each environment
  • What is in scope for assessment or testing
  • How complex the remediation is
  • How much hands-on engineering you need from us

Security Retainer

Ongoing security engineering, on a recurring fee

For teams that want security work to continue after the first engagement. Retainer scope and fee are agreed in writing.

Security Retainer

Available

Recurring review, re-checks, drift fixes and periodic testing, so controls stay in place between audits.

Typically includes

  • Recurring review of your cloud controls
  • Re-checks and drift awareness
  • Remediation support
  • Verification of changes
  • Security engineering access for questions and reviews

Re-checking and drift work grow as ARIA's capabilities launch.

Fixed price after scoping

ARIA with the retainer

Launching

Platform access is included with the Security Retainer as its capabilities launch.

Retainer customers get access to ARIA capabilities as each one reaches production. No separate ARIA fee applies within the retainer.

What is available in ARIA

Product

ARIA

Cloud control remediation and verification

Included with the Security Retainer

Platform access is included with the Security Retainer as its capabilities launch.

Standalone access

Launching

Standalone packaging and pricing will be set with early pilot customers. No standalone price is published yet.

Talk to us about ARIA

How ARIA works

Services + ARIA

Buy one, or both

Service → ARIA

A service engagement can introduce your team to ARIA's verification and remediation workflow. Keep using it afterwards only if it suits you.

ARIA → Service

ARIA customers can engage us for testing, complex remediation, architecture, readiness or ongoing engineering. Neither requires the other.

Availability

What the states mean

Available

A current commercial offering you can buy today.

  • Cloud Security Assessment
  • Remediation & Hardening
  • Security Retainer
  • DevSecOps & CI/CD Security
  • Certification Technical Readiness
  • Secure Cloud Engineering
  • Resilience Review
  • Cost & Security Review
Launching

In active development or a controlled launch. Register your interest.

  • ARIA
  • Penetration Testing (VAPT)
  • Kubernetes Security
Planned

A future capability on our roadmap. Not yet offered.

  • AI / LLM Application Security Testing
  • PCI DSS Technical Support
  • ISO 42001 Technical Security

Where we work

India and the United Arab Emirates

Proposals are written for each customer. No regional price list is published.

  • India

    Cloud security engineering for Indian SaaS, fintech and technology teams preparing for enterprise customer reviews, ISO 27001 or SOC 2 audits and regulator expectations.
  • United Arab Emirates

    The same engineering, scoping and approval model for UAE companies running on AWS and Microsoft Azure. Engagements are scoped and delivered remotely, with on-site work agreed per engagement.

What happens next

From scoping call to engagement

  1. 01

    Scoping call

    We talk through your cloud and what you need.

  2. 02

    Environment and objective

    We understand your environment and what a good outcome looks like.

  3. 03

    Scope

    We define what is in scope and what is not.

  4. 04

    Deliverables

    We confirm exactly what you will receive.

  5. 05

    Proposal

    You receive a written commercial proposal.

  6. 06

    Engagement

    Work begins once you accept the proposal.

FAQ

Pricing questions

Common questions

Why aren't all services shown with prices?
Two cloud assessments can differ widely in account structure, scope and the engineering depth they need. We agree the scope first and then give you a fixed price in writing.
Can ARIA be purchased standalone?
Standalone access is launching. Standalone packaging and pricing will be set with early pilot customers. No standalone price is published yet. Talk to us if you are interested.
Is ARIA included in the retainer?
Platform access is included with the Security Retainer as its capabilities launch.
Can I buy services without ARIA?
Yes. Every available service can be bought on its own, without ARIA.
Can I buy ARIA without services?
That is what standalone access is for. It is launching; talk to us about it. You do not need services to use ARIA.
Do you work with AWS, Microsoft Azure and Google Cloud?
AWS: services available, ARIA launching; Microsoft Azure: services available, ARIA launching; Google Cloud: services launching, ARIA launching.
Do you work with customers in India and the UAE?
Yes. Both are our target markets from the start. Engagements are scoped, proposed and priced in writing for each customer.

Start with a scoping call.

Tell us about your cloud and what you need. You receive a written scope and a fixed-price proposal before any work starts.