Plans

Three configurations. Scope defined by the organization.

The distinction between plans lies in the breadth of monitoring and the level of follow-through performed by CyberSeven. Investment follows the size of the contracted environment, which is why it is established case by case rather than by fixed table.

Essential

Organizations that need to establish visibility of external exposure and meet a first requirement for evidence of security.

External view of the perimeter: the surface published to the internet and known vulnerabilities in operating systems.

Plan composition

External network under continuous monitoring
Vulnerability scanner
Security index and prioritized remediation queue
Artificial intelligence assistant
Executive report as PDF
Assisted implementation and email support

Start the evaluation

Recommended

Complete

Organizations with cloud systems, their own web applications, and processing of client data.

Full coverage, internal and external, with task management and scheduling to sustain continuity of remediation.

Essential composition, plus

Internal network with asset inventory
WebApp Security for sites and portals
Cloud Security Agent
DeepWeb Scanner for credential exposure
Tickets and processes with owner and status
Scheduled scans and observability

Start the evaluation

Managed

Organizations without internal capacity available to execute the corrections identified.

The complete platform accompanied by a CyberSeven analyst conducting the remediation plan.

Complete composition, plus

A CyberSeven analyst assigned to the risk queue
Monthly security posture review meeting
Support executing corrections with the internal team or vendor
Support for audits and client security questionnaires
A direct channel for questions and incident reporting

Start the evaluation

Investment

Pricing criteria

The absence of a fixed table follows from the variation in scope between organizations: a twelve-station practice and a six-branch freight company do not present the same surface to monitor. Three variables determine the investment.

Volume of monitored assets

Servers, workstations, devices, and published systems included in scope. This is the variable of greatest weight and remains under the organization’s control when defining scope.

Enabled modules

An e-commerce operation requires WebApp Security and cloud auditing; a services firm may require only the external front and the vulnerability scanner.

Level of follow-through

Corrections executed by the organization’s team, or the queue conducted by a CyberSeven analyst. This corresponds to the distinction between the Complete and Managed plans.

Contracting

Contracting process

A defined sequence, without prolonged discovery stages.

Registration on the platform with preliminary information on the size of the environment.
A thirty-minute meeting to formally define the monitoring scope.
Presentation of the proposal with scope and investment within one business day.
Evaluation period executed before any contractual commitment.

Dedicated support

Environments with specific requirements.

Organizations with multiple sites, particular regulatory obligations, or a need to integrate with existing systems may request a dedicated commercial assessment.

For environments within the customary profile, signing up directly on the platform makes this step unnecessary.

Establish your current exposure.

The evaluation runs against the organization’s real environment and delivers the initial security index and the prioritized risk queue within the first week.

Start the evaluation Contact the team