Modern infrastructure has no clear "server" definition. Serverless functions, auto-scaling Kubernetes pods, network SPAN ports, and IoT deployments all generate traffic without traditional servers. Per-server pricing breaks down.
Serverless
0 servers. Massive traffic.
Kubernetes
5 nodes. 500 auto-scaling pods.
Network Taps
3 collectors. 500 servers monitored.
Auto-Scaling
10 servers at night. 200 at peak.
Multi-Tenant
50 hypervisors. 1,000 VMs.
IoT
10,000 devices. 5 servers.
Credits measure actual work performed. Storage credits cover data ingestion, 237× compression, and retention. Detection credits cover AI inference on unique external organizations. Universal pricing that works for any infrastructure.
Data ingestion
237× compression
Entity deduplication
Retention
Transformer AI inference
Unique external org analysis
C2 beaconing
Exfiltration
Lateral movement (Enterprise)
Tiers differentiate on capabilities, not arbitrary limits. Detect runs C2 and exfiltration models on flow metadata. Enterprise adds lateral movement detection and full protocol inspection. Multipliers reflect actual resource consumption differences.
$400+ /month
Detection:
C2 + Exfiltration
Data:
Flow metadata
Multipliers:
1.0× storage, 1.0× detection
$2,000+ /month
Detection:
Detect + Lateral movement + Graph
Data:
Full protocol inspection
Multipliers:
1.8× storage, 2.0× detection
MID-MARKET COMPANY
50 servers, 100 users, 6-month retention, medium traffic
Base storage: 50 × 3 × 180 = 27,000
Storage credits: 27,000 × 1.0 = 27,000
Unique targets: 500
Detection: 500 × 30 × 1.0 = 15,000
$2,100/month
Detect tier
SAME COMPANY, ENTERPRISE TIER
50 servers, 100 users, 6-month retention, medium traffic
Base storage: 50 × 3 × 180 = 27,000
Storage credits: 27,000 × 1.8 = 48,600
Unique targets: 500
Detection: 500 × 30 × 2.0 = 30,000
$3,930/month
Enterprise tier
Universal
Any infrastructure. Servers, serverless, Kubernetes, taps, IoT.
Fair
Actual work performed. Not proxy metrics.
Predictable
Real-time consumption tracking. Usage alerts.
Scalable
Detection plateaus at 1,000 orgs. Storage linear.
Transparent
Published rates. Example calculations.
Flexible
Configure retention independently of tier.