How pricing works.
Your plan covers a set of Nodes and Devices, with monthly credits for monitoring activity. Add coverage as your network grows.
Count where you install it.
Then what it observes.
Nodes
Install Prophet Node on a high-value server, virtual machine or other supported endpoint. It collects that machine’s local host and network telemetry so Prophet can detect and reconstruct attacks affecting it. You do not need a network TAP to observe the host.
A Node can also observe many other machines through mirrored, SPAN or TAP traffic. It can collect local telemetry and receive a mirrored feed together; it does not have to be a dedicated collector. Its visibility depends on the traffic and sources available to it.
Explore Prophet NodeDevices
Devices are the other machines Prophet observes: laptops, phones, printers, IoT and other hosts without their own Node. A Node’s own machine is never also billed as a Device.
For example, a Node on a server that also observes 20 other machines counts as one Node and 20 Devices. Installing a Node directly on one of those observed hosts adds its local host and network telemetry. It then counts as a Node rather than a Device.
One plan. Additional coverage as needed.
Every organization starts on a plan. Both plans include full detection and autonomous attack reconstruction. The difference is the coverage and credit allowance included in the price.
| Plan | Monthly price | Included coverage | Monthly credits |
|---|---|---|---|
| Personal | $100 | 3 Nodes 15 Devices | 60 |
| Team | $200 | 10 Nodes 50 Devices | 200 |
- Additional Node
- $25 / month
- 5 monthly credits
- Additional Device
- $5 / month
- 1 monthly credit
- Extra credit
- $5 each
- Billed monthly
Rates and allowances are provisional.
Credits follow monitoring activity.
Credits measure how much monitoring activity Prophet processes each month. Your allowance pools across the account: quieter hosts leave more available for busier ones. A typical Device uses less than one credit per month. Busy hosts and network feeds can use more.
Plans include twice the credits their included Nodes and Devices would receive at additional-unit rates. Additional coverage contributes its own credits to the same pool. If activity exceeds the pooled allowance, extra credits cost $5 each and are billed monthly.
A footprint estimate: 25 Nodes and 100 Devices
- Team plan
- $200
- 15 additional Nodes at $25
- $375
- 50 additional Devices at $5
- $250
- Monthly base price
- $825
- Credits included each month
- 325
This is a base estimate, not a prediction of the final bill. Nodes and Devices establish the base price and allowance; actual monitoring activity determines whether extra credits are needed.
Annual billing
Annual billing saves 20% on the plan and additional Nodes and Devices. The monthly credit allowance stays the same. Extra credits remain $5 each and are billed separately every month; they do not receive the annual discount.
The example above becomes $660 per month, with a $7,920 annual base payment and the same 325 credits included each month.
Usage is measured across your network.
- Device count
- Devices are counted in your network’s busiest hour each month. A Device is a distinct machine, not an address.
- Credit use
- Credits measure the month’s total monitoring activity. Addresses Prophet cannot reliably associate with a machine are not billed as Devices, but their activity still uses credits.
- Changes
- Prophet confirms usage from 30 days of observation. Changes to agreed rates and capacity are prospective, never retroactive. Extra credits are billed monthly at the published rate.
Planned: 30 days of history on every plan
Rollout is pending. The 30-day history allowance is not yet live.
Enterprise is scoped to the work Prophet replaces.
At around $5,000 per month in plans, additional coverage and extra credits, before annual discounts, we scope an Enterprise agreement. There is no fixed Node-count cap. You can also choose Enterprise earlier when you need contract terms.
Enterprise pricing reflects the senior SOC analyst and threat-hunter capacity Prophet replaces. Agreements define included credits and the operating terms for your network, including service levels, retention, invoicing and procurement requirements. The product remains the same: full detection and autonomous attack reconstruction.
Use your footprint to estimate the base price and included credits.
Estimate your coverage