Take AssessmentBook a Briefing

Pricing

Three concrete tiers, no middleman markup.

Foundation gets you managed endpoint coverage with no contract. Protected adds identity and training. Complete adds SIEM and audit-grade log retention. Pick the tier that matches your risk — not the salesperson's commission.

For your business

Managed cybersecurity tiers

Foundation

$15/agent / month

Month-to-month. No minimum. EDR-only.

  • Managed EDR on every endpoint, monitored 24×7 by the Huntress SOC
  • Alert triage and human review of every isolation event
  • Quarterly posture check-in
  • Install / uninstall agents at any time
Start with Foundation

Most common

Protected

$32/user / month

Annual. EDR + ITDR + SAT bundle.

  • Everything in Foundation
  • Managed ITDR for Microsoft 365 / Entra ID and Google Workspace identity threats
  • Managed Security Awareness Training with phishing simulations
  • Compliance-reportable training records (SOC 2 / ISO 27001 / HIPAA)
  • Monthly security review and stakeholder report
Get Protected pricing

Complete

From $55/user / month

Scoped. EDR + ITDR + SAT + Managed SIEM.

  • Everything in Protected
  • Managed SIEM with log aggregation across endpoint, identity, network, and cloud
  • 90-day searchable log retention for audit response
  • Quarterly tabletop exercise
  • Dedicated framework alignment support (NIST / ISO 27001 / SOC 2 / HIPAA)
Scope a Complete engagement

Foundation lists per agent because EDR runs on devices. Protected and Complete list per user because identity and training are people-based. Real numbers and term options come back in the proposal within one business day.

Add-ons & sprints

Fixed-fee work, no surprises in the proposal

Onboarding

$500 flat (≤25 agents)

$1,000 for 26–100 agents

  • Discovery, agent deployment, identity baseline
  • Alert routing and escalation paths
  • 30-day check-in

Cyber Insurance Sprint

$4,500 flat / 2 weeks

Ready for renewal or new application

  • Gap assessment against insurer control questionnaire
  • Remediation plan with prioritized fixes
  • Application support and evidence package
Scope a sprint

Incident Response

$500 /hour, 5-hour blocks

When something has already happened

  • Same-day response within business hours
  • Containment, root-cause, remediation plan
  • Post-incident debrief and hardening guidance
Get help now

SOC 2 Type II foundation programs and HIPAA Security Rule alignment are scoped per environment — typical engagements run $25K–$60K depending on entity count and existing controls. Get a fixed-fee proposal in the briefing.

Other audiences

If you're not a growing business

Individuals & families

$199 one-time

to $89 / month for ongoing protection

  • Foundation, Protected, and Family plans for personal cybersecurity
  • Direct purchase available — no enterprise sales motion
  • Incident help available even without a subscription
See individual plans

Enterprise

Custom scope

Assessment, architecture, response, advisory.

  • Project and advisory engagements scoped to objectives
  • No generic seat-based pricing assumptions
  • Best fit for teams with existing internal capability
Start an enterprise discussion

FAQ

Pricing questions that come up often

Why these prices?

Each tier reflects the cost of the underlying platform plus a senior practitioner's time. No middleman markup, no shelfware bundles, no hidden onboarding fee surprises.

Is there a contract?

Foundation runs month-to-month — install and uninstall agents at any time. Protected and Complete tiers are typically scoped on annual terms because identity coverage, training cadence, and SIEM data sources benefit from continuity.

What is included in onboarding?

Discovery, agent deployment, identity baseline, alert routing, and a 30-day check-in. Onboarding is a flat fee disclosed in the proposal — never a surprise.

What is not included by default?

Major architecture transformations, deep incident response retainers, and unusual compliance projects (e.g. multi-entity SOC 2 Type II) are scoped separately so you don't pay for hours you don't need.

Can I start with a single product instead of a bundle?

Yes. Foundation is EDR-only and a fine starting point. Identity (ITDR) and training (SAT) can be added when you're ready — most clients add identity coverage within 60 days of starting.

Do you sell only the underlying tools without the managed service?

No. The value is in the practitioner who deploys correctly, watches the alerts that matter, and tells you what to do when something happens. If you only want a tool license, buy direct.

Next step

Not sure which tier fits?

Briefings are free and we tell you when you don't need us. 30 minutes, real answers, no follow-up sales sequence.

Book a 30-min briefing