Ridge Core
$25per person / month
Month-to-month · no minimum
Your everyday protection
Business protection, explained clearly
The right protection.
A clear monthly cost.
Start with the protection your business needs today. Each plan adds to the one before it, with a real security team behind you.
Choose your protection
Clear plans. Clear costs.
Ridge Plus
$50per person / month
Annual term · billed monthly
Everything in Ridge Core, plus
Ridge Reserve
$70per person / month
Annual term · billed monthly
Everything in Ridge Plus, plus
One-time setup: $500 for up to 25 machines, $1,000 for 26 to 100.
How people are counted
All three tiers list per person, because each one watches the people in your practice as well as their computers. A shared computer with no named user counts as one person. Ridge Watch, for homes, is priced per computer instead.
Look a little closer
Know what you’re getting.
Open a plan to read every inclusion and its limits. The cards above give you the quick version.
Included in every plan: automatic software updates.
Software updates are installed automatically on your business computers. We confirm the supported software and update schedule with you during setup.
Ridge CoreYour computers and work accounts, watched day and night.
Everything included in Ridge Core
Month-to-month · no minimum
A shared computer with no named user counts as one person.
Always-on protection on every computer in your practice.
MDR / EDR: suspicious activity on workstations is watched 24/7 by a real security team, so one compromised laptop is less likely to interrupt client work.
Human review before alerts reach you.
SOC triage: a real analyst reviews suspicious activity first, so your team is not expected to interpret raw security alerts during a busy day.
Quarterly review of how your security is holding up.
Posture review: we look at what changed, what improved, and what still needs attention before small gaps become expensive problems.
Direct email support from a senior analyst.
Security advisory: a person to ask when something feels off, not a generic ticket queue.
Add or remove devices at any time.
Agent-based deployment: coverage can follow the computers your practice actually uses without locking you into unused seats.
Email and cloud account monitoring.
ITDR: Microsoft 365 or Google Workspace accounts are watched for break-in attempts and identity-based attacks.
Automatic software updates.
Patching: software updates are installed automatically on your business computers. We confirm the supported software and update schedule with you during setup.
What is not included by default
- Security awareness training and phishing simulation: that's Ridge Plus
- Email protection, configured and monitored: that's Ridge Plus
- The secure browser for your work apps: that's Ridge Plus
- Log collection and retention: Ridge Log, an add-on on any tier, $8 per data source per month
- Incident response plan and ransomware tabletop: that's Ridge Reserve
Replaces or complements
- Antivirus subscriptions that flag everything and stop nothing
- Generic IT-installed protection with no one reviewing alerts
- Monthly log review your team never finds time for
Coverage notes
- Cyber insurance baseline
- SOC 2 readiness (partial)
- HIPAA Security Rule (partial)
Ridge PlusAdd safer email, staff training and a secure browser for work.
Everything included in Ridge Plus
Annual term · billed monthly
Security training for staff.
security awareness training: short lessons and realistic phishing simulations help your team recognize common attacks before they become an incident.
Training records for audits and insurance.
Compliance evidence: you have documentation ready when HIPAA, SOC 2, ISO 27001, client questionnaires, or insurers ask what your staff received.
Monthly security summary in plain English.
Executive reporting: you see what was watched, what was investigated, and what needs a decision without learning another dashboard.
Senior analyst included.
the same email channel as Ridge Core, scoped for the wider Ridge Plus program.
Email protection, configured and monitored.
Email Security: the anti-phishing, link and attachment protection in your Microsoft 365 or Google Workspace license, configured for your practice, with SPF, DKIM and DMARC set up and monitored.
A secure browser for your work apps.
Island Enterprise Browser: company apps open in a browser that controls what can be copied, pasted, downloaded, uploaded, printed or captured on screen, on company or personal computers.
Always-on protection on every computer in your practice.
MDR / EDR: suspicious activity on workstations is watched 24/7 by a real security team, so one compromised laptop is less likely to interrupt client work.
Human review before alerts reach you.
SOC triage: a real analyst reviews suspicious activity first, so your team is not expected to interpret raw security alerts during a busy day.
Quarterly review of how your security is holding up.
Posture review: we look at what changed, what improved, and what still needs attention before small gaps become expensive problems.
Direct email support from a senior analyst.
Security advisory: a person to ask when something feels off, not a generic ticket queue.
Add or remove devices at any time.
Agent-based deployment: coverage can follow the computers your practice actually uses without locking you into unused seats.
Email and cloud account monitoring.
ITDR: Microsoft 365 or Google Workspace accounts are watched for break-in attempts and identity-based attacks.
Automatic software updates.
Patching: software updates are installed automatically on your business computers. We confirm the supported software and update schedule with you during setup.
What is not included by default
- Log collection and retention: Ridge Log, an add-on on any tier, $8 per data source per month
- Incident response plan and yearly ransomware tabletop: that's Ridge Reserve
- Quarterly admin-access review and monthly patch reporting: that's Ridge Reserve
- Deep incident response retainers and major architecture redesigns (scoped separately)
Replaces or complements
- Standalone antivirus or endpoint subscriptions
- Separate phishing-training tools you bought and forgot to roll out
- One-off compliance gap assessments with no follow-through
Coverage notes
- Cyber insurance baseline
- SOC 2 readiness
- HIPAA · add-on (partial)
Ridge ReserveAdd a written plan for trouble and regular checks of your protection.
Everything included in Ridge Reserve
Annual term · billed monthly
An incident response plan, and a ransomware tabletop every year.
IR plan + tabletop: a written plan your team can follow, reviewed each year, and a walkthrough of a ransomware attack before the pressure is real.
Quarterly admin-access review.
Privileged access: every quarter we check who holds admin rights and whether they still should, and that admin accounts stay separate from everyday ones.
Monthly patch report, with a 14-day deadline for known-exploited vulnerabilities.
Patch reporting: every vulnerability in CISA's Known Exploited Vulnerabilities catalog is remediated, mitigated, or documented as an exception you accept, within 14 days of CISA listing it. Fourteen days is the longest deadline CISA's current directive, BOD 26-04, gives federal agencies for a catalogued vulnerability. It does not apply to private businesses; we use it as the benchmark.
Microsoft 365 security settings applied and kept in place.
Managed ISPM: Microsoft 365 only. The recommended identity settings are applied on a schedule we agree with you, and a managed setting that someone changes is put back.
Your insurance questionnaire, refreshed every year.
Questionnaire refresh: the Readiness Sprint's evidence pack, updated each year so your renewal answers stay true.
Security training for staff.
security awareness training: short lessons and realistic phishing simulations help your team recognize common attacks before they become an incident.
Training records for audits and insurance.
Compliance evidence: you have documentation ready when HIPAA, SOC 2, ISO 27001, client questionnaires, or insurers ask what your staff received.
Monthly security summary in plain English.
Executive reporting: you see what was watched, what was investigated, and what needs a decision without learning another dashboard.
Senior analyst included.
the same email channel as Ridge Core, scoped for the wider Ridge Plus program.
Email protection, configured and monitored.
Email Security: the anti-phishing, link and attachment protection in your Microsoft 365 or Google Workspace license, configured for your practice, with SPF, DKIM and DMARC set up and monitored.
A secure browser for your work apps.
Island Enterprise Browser: company apps open in a browser that controls what can be copied, pasted, downloaded, uploaded, printed or captured on screen, on company or personal computers.
Always-on protection on every computer in your practice.
MDR / EDR: suspicious activity on workstations is watched 24/7 by a real security team, so one compromised laptop is less likely to interrupt client work.
Human review before alerts reach you.
SOC triage: a real analyst reviews suspicious activity first, so your team is not expected to interpret raw security alerts during a busy day.
Quarterly review of how your security is holding up.
Posture review: we look at what changed, what improved, and what still needs attention before small gaps become expensive problems.
Direct email support from a senior analyst.
Security advisory: a person to ask when something feels off, not a generic ticket queue.
Add or remove devices at any time.
Agent-based deployment: coverage can follow the computers your practice actually uses without locking you into unused seats.
Email and cloud account monitoring.
ITDR: Microsoft 365 or Google Workspace accounts are watched for break-in attempts and identity-based attacks.
Automatic software updates.
Patching: software updates are installed automatically on your business computers. We confirm the supported software and update schedule with you during setup.
What is not included by default
- Log collection and retention: Ridge Log, an add-on, $8 per data source per month
- Managed backup and recovery — not sold yet; the Readiness Sprint checks and documents your backups
- Full SOC 2 Type II audit fieldwork (quoted by the audit firm, scoped separately)
- Multi-entity HIPAA Security Rule program for a parent + 5+ subsidiaries (scoped separately)
- Incident response retainers (block-billed at $500/hr)
- Hardware procurement, network architecture redesigns, or M&A IT integration
- Help-desk, end-user support, or general IT services: we don't sell those
Replaces or complements
- An incident response plan that lives in a drawer
- Patching nobody reports on until the renewal asks
- A patchwork of security tools that don’t talk to each other
Coverage notes
- Cyber insurance baseline
- SOC 2 log retention with the log-collection add-on (partial)
- Supports HIPAA and PCI-DSS evidence (partial)
Optional security records
Ridge Log (log collection). Logs from your firewall, cloud tools and other security products, collected and kept searchable. Available on any tier. $8 per data source per month. We count your sources with you before we quote.
See what computer protection costs for a small business, with computer-count examples, setup and the distinction between Ridge Watch and Ridge Core. Real numbers and term options come back in the proposal within one business day.
CISSP-led. We explain the scope and costs before you commit. Meet the person responsible ↗
See an example business billA worked example, including setup and the first year.
Worked example
A 25-person firm on Ridge Plus
- 25 people × $50 per person per month = $1,250 a month
- Twelve months: $15,000 a year
- Onboarding, once: $500, the flat fee for up to 25 machines
- First year: $15,500. After that, $15,000 a year.
This assumes 25 computers, one per person. Ridge Plus is priced per person and onboarding by machine, so one more machine, a server say, moves onboarding to $1,000. Your proposal carries the real numbers.
Already have an IT company?See how we work alongside everyday IT support.
For your business
Alongside your current IT company
Keep your IT company. They handle the help desk, the hardware and the everyday fixes. We run the security layer beside them: threat detection and response, and the evidence insurers and auditors ask for.
What we don't do
- Help desk and everyday IT support
- Printers and office hardware
- Practice-management software support: installs, upgrades, troubleshooting
Who answers what
- Threats, around the clock: Huntress's 24/7 SOC. Reviews every alert and acts on it: remediates it, notes it, or takes the device off the network to contain it. Containment is one of those three outcomes, not what happens every time.
- Everything else: Obsidian Ridge. Reviews and releases contained devices, answers your questions and does everything past containment, within one business day.
- An active incident: Your cyber insurance carrier's breach hotline. Call the number in your policy first, then tell us.
There is no emergency line.
Only need computer monitoring?See the separate Ridge Watch option.
Just want monitoring?
Not ready for the full program?
Ridge Watch is the escape hatch: real 24/7 managed monitoring on your computers for $15 per device per month, month-to-month, cancel any time. No program, no minimum beyond a single device — just the protection.
Email me the pricing summaryKeep the information to review with your team.
No pressure
Want this in your inbox?
Working on an insurance application?What the plans cover, and why backups are separate.
What carriers ask about
The controls on the application are in these tiers.
Cyber-insurance applications ask about endpoint detection, multi-factor authentication, security awareness training and backups. Managed EDR and identity threat detection, which watches the sign-ins MFA protects, run in every tier, from Ridge Core. Ridge Plus adds security awareness training.
Backups are not part of any tier. The Readiness Sprint checks that yours have an MFA-protected or immutable copy and a tested restore, and documents it for the application. We do not sell managed backup yet.
Setup, projects and incident helpThe published fees and scope for work outside your monthly plan.
Add-ons & sprints
Fixed-fee work, no surprises in the proposal
Onboarding
$500 flat (≤25 agents)
$1,000 for 26–100 agents
- Discovery, agent deployment, identity baseline
- Alert routing and escalation paths
- 30-day check-in
Cyber Insurance Sprint
from $1,500 / 7 business days
Ready for renewal or new application
- Gap assessment against insurer control questionnaire
- Remediation plan with prioritized fixes
- Application support and evidence package
Business incident response
$500 /hour, 5-hour blocks
For businesses, when something has already happened
- Response within one business day
- Containment, root-cause, remediation plan
- Post-incident debrief and hardening guidance
SOC 2 Type II foundation programs and HIPAA Security Rule alignment are scoped per environment. Third-party audit fieldwork is quoted by the audit firm, not by us. Get a fixed-fee proposal in the briefing.
Personal or enterprise protectionOptions for individuals, families and larger organizations.
Other audiences
If you're not a growing business
Individuals & families
$199 one-time
to $89 / month for ongoing protection
- Ridge Watch and Ridge Family plans for personal cybersecurity
- Direct purchase available — no enterprise sales motion
- Incident help at $250 per incident, no subscription required
Enterprise
Custom scope
Assessment, architecture, response, advisory.
- Project and advisory engagements scoped to objectives
- No generic seat-based pricing assumptions
- Best fit for teams with existing internal capability
FAQ
Pricing questions that come up often
Why these prices?
Each tier reflects the licensed security platform we operate plus the time of the senior analyst who runs your program — deployment, tuning, 24/7 SOC escalation, and a written monthly report. No shelfware bundles, no hidden onboarding fee surprises.
Is there a contract?
Ridge Core runs month-to-month with no minimum. Ridge Plus and Ridge Reserve are on an annual term, billed monthly, because the training program, the email protection settings and the yearly incident response work benefit from continuity.
There is never silent auto-renewal; renewal terms are opt-in every year.
What is included in onboarding?
Discovery, agent deployment, identity baseline, alert routing, and a 30-day check-in. Onboarding is a flat fee disclosed in the proposal — $500 for up to 25 agents, $1,000 for 26 to 100. Above 100 agents, we scope a custom onboarding window.
What is not included by default?
Major architecture transformations, deep incident response retainers, multi-entity SOC 2 Type II audit fieldwork, hardware procurement, and general IT/help-desk are scoped separately or are out of scope entirely. Each tier card shows the explicit exclusions so you don't pay for hours you don't need.
Can I start with a single product instead of a bundle?
Yes. Ridge Core is a fine starting point: managed EDR on every computer plus email and cloud account monitoring (ITDR), month to month.
Training (SAT), email protection and a secure browser for your work apps come with Ridge Plus when you're ready. Log collection is Ridge Log, an add-on on any tier at $8 per data source per month.
Do you sell only the underlying tools without the managed service?
No. The value is in the analyst who deploys correctly, watches the alerts that matter beyond the SOC's automatic triage, and tells you what to do when something happens. If you only want a bare license, buy direct from the vendor.
We don't compete with the vendor's own channel — we operate the platform end-to-end and add the program around it.
Can we switch tiers later?
Yes. Tier upgrades are immediate and prorated. Downgrades from Ridge Plus or Ridge Reserve take effect at the next renewal, because both run on an annual term. There are no upgrade fees or downgrade penalties.
Is there a minimum seat count?
Ridge Core has no minimum: start with one person if that's what you have. A shared computer with no named user counts as one person.
Ridge Plus and Ridge Reserve are designed for organizations with at least 5 people; below that, the program carries fixed overhead that we'd rather route to Ridge Core plus bolt-on advisory hours instead.
Why not just buy Huntress direct?
Because of the seat minimum, not the rate. Huntress publishes a 50-seat minimum per product on direct purchases and on reseller purchases, and none through an MSP (source: huntress.com/pricing, checked 2026-09-30).
Its published Managed EDR rate is $7.99 per endpoint per month at 100 endpoints, and Huntress states the per-unit rate goes down as volume goes up — so a smaller deployment pays more per endpoint, and no rate below 50 units is published.
At the 50-seat minimum its own in-house-team calculator reads $449.50 a month, or $8.99 per endpoint.
So the direct floor is at least $399.50 a month, and $449.50 by Huntress' own calculator, whether you deploy 10 endpoints or 50, on Huntress' standard 12-month term.
Here there is no minimum: Ridge Core is $25 per person per month, month to month, and it watches the Microsoft 365 or Google Workspace accounts (ITDR) as well as the computers; Huntress sells identity threat detection as a separate product.
For a home or a very small office that only needs the computers watched, Ridge Watch is $15 per computer per month.
Once a deployment is large enough, the direct license costs less on paper, and the difference is what pays for deployment done correctly the first time, ongoing tuning, escalation to a named CISSP-led practitioner rather than a queue, and the HIPAA/ABA/FTC Safeguards/SOC 2 evidence package.
If you have 50+ endpoints, someone in-house who will consistently own alerts and remediation, and no compliance evidence requirement, buy direct. We say so out loud.
How does billing work for partial months when we add or remove people mid-cycle?
Adds are prorated from the day the person is covered. Removes credit the next invoice, prorated to the day coverage ends. This is how the platform's billing flows through; we don't add a separate proration policy on top.
Next step
Not sure which tier fits?
Briefings are free and we tell you when you don't need us. 30 minutes, real answers, no follow-up sales sequence.
If a call feels like too much for a first touch, send us a note. We read every message.