Pricing

Scanner is free.
Onboard, then we scope cost.

Run the Compliance Scanner free against your M365 or Google Workspace tenant today. Ready for agentic triage or managed response? Onboard and we'll scope cost & payment with you after a short call.

Agentic triage

Zerotouch

Every alert triaged by the agent swarm. You stay in the driver's seat; SocSage does the legwork.

Contact us
Per-tenant pricing · volume tiers for MSPs
  • Everything in Free
  • 24/7 agent triage on every alert
  • InvestigationViz live stream & Replay
  • 2,000+ MITRE-mapped detections (KQL, FQL, DVQL, LogScale) — evolving daily
  • HITL approvals in Slack / Teams
  • 23+ integrations out of the box
Onboard — talk cost after
Onboard first, then we scope cost & payment with you.
Fully managed

Managed MDR

Agent swarm plus our human SOC analysts on the HITL gates. White-label for partners.

Contact us
Custom scope · partner-margin economics
  • Everything in Zerotouch
  • Reddome analysts on HITL gates
  • Herd Intelligence Board access
  • White-label partner console
  • Dedicated onboarding engineer
  • Signed SLAs & tamper-evident audit
  • Sovereign-deploy options
Onboard — talk cost after
Partner programme available.
Questions

Pricing FAQ

How does pricing work?
The Compliance Scanner is free forever — no card, no trial clock. Zerotouch and Managed MDR are the two paid tiers: you can onboard today and we'll scope cost with you after a short call. Partner pricing is volume-tiered.
How do I upgrade from Free to Zerotouch or MDR?
Email [email protected] with your tenant count and preferred tier. We'll send a scoped quote back the same working day and, if you want to move forward, flip your tenant over in a couple of hours — no re-onboarding.
Can MSPs bring multiple tenants?
Yes, we're built for that. Partner pricing is volume-tiered with a white-label option. Drop us a line and we'll scope it to your book.
Is there a contract minimum?
Free is free with no card. Paid tiers are monthly rolling by default; annual commitments attract a discount which we'll include in the quote.
Where does my data live?
UK data boundary. Your tenant data stays in your tenant; SocSage uses delegated access (GDAP where applicable) and never exfiltrates raw telemetry. Full details on the Security page.
Start free scan Contact us for a quote