Personal
$60 a year
For one person and their devices. Local Mini agent with decoys and alerts on up to 3 devices, $25 for each extra device up to 5. The whole fee is credited if you move up.
Get startedPricing and cost comparison
One licence. Detection, logs and deception.
krupiq replaces endpoint detection, log analytics and deception in a single price, and runs on your own hardware, so you never pay for compute, ingestion or retention. The seat price looks higher than an EDR seat. The total comes out lower.
Plans
Small Business
from $600 a year
Chimera Lite on one box, full detection and deception, 10 seats included, then $150 a seat. Self-serve setup and docs. Up to 100 endpoints.
Get startedBusiness
from $6,000 a year
Full Chimera, automated response, integrations and email support. 70 seats included, then from $300 a seat, no cap. One seat replaces your EDR, SIEM and deception licences together.
Get startedEnterprise
from $60,000 a year
Everything in Business plus a high-availability pair, multi-site, SSO, audit exports and a 99.9% support SLA.
Get startedSovereign
$600 a day
Everything in Enterprise, air-gapped. Offline signed updates, TPM binding, a named engineer and source escrow. 250 seats included.
Get startedPrices are list, in USD, per year. Competitor figures are public list prices and exclude retention add-ons, support tiers and managed services. Competitor totals count only licence and ingestion, so the comparison is conservative.
Cost calculator
Size your estate. See the yearly cost next to cloud EDR plus SIEM.
Move the sliders. The comparison uses public list prices for CrowdStrike Falcon Enterprise with Next-Gen SIEM and SentinelOne Singularity Complete with Microsoft Sentinel, and lets you apply any negotiated discount you expect.
krupiq Business saves $56.5k over 3 years at 250 endpoints.
That is 24% below the cheaper cloud option including log fees. Against endpoint licences alone, krupiq is 33% higher.
krupiqBusiness
$6,000 platform incl. seats + 250 endpoints, unlimited data
$60,000 /yr
Per endpoint / year$240
3-year total$180k
CrowdStrikekrupiq 24% lower
Falcon Enterprise + Next-Gen SIEM
$78,824 /yr
Per endpoint / year$315
3-year total$236k
SentinelOnekrupiq 29% lower
Singularity Complete + Microsoft Sentinel
$84,235 /yr
Per endpoint / year$337
3-year total$253k
White-label partner economics
What an MSP or hoster pays you, what they charge their customers, and what they keep. Yearly figures.
- List price
- Partner pays you
- Partner bills customers
- Partner margin
- Partner break-even
Where the yearly bill goes
LicenceData ingestion feesYour own hardware
Cost per endpoint as you grow
Yearly cost per endpoint on log scales, following the best-fit plan at each size. Steps mark plan changes. Dots mark your current size.
krupiqCrowdStrike + NG-SIEMSentinelOne + Sentinel
The plans
One platform, five plans
Plans differ by what they unlock, not by how much data you process. Every paid plan pays a platform fee plus a yearly fee per connected Mini, and seats get cheaper as you add more.
| Plan | For | Platform per year | Seats | Unlocks |
|---|---|---|---|---|
| Personal | Individuals and sole traders | $60 | 3 included, then $25 each, up to 5 | Local Mini agent, decoys, alerts. Fee credited in full on upgrade |
| Small Business | Firms with up to 100 endpoints | $600 | 10 included, then $150 each | Chimera Lite on one box, detection and deception, self-serve support |
| Business | Growing firms, no seat cap | $6,000 | 70 included, then banded | Full Chimera, automated response, integrations, email support |
| Enterprise | Multi-site and regulated organisations | $60,000 | 70 included, then banded | Everything in Business plus HA pair, multi-site, SSO, audit exports, 99.9% support SLA |
| Sovereign | Government, defence and data centres | $219,000 $600 a day | 250 included, then banded | Everything in Enterprise plus air-gap, offline updates, TPM binding, named engineer, source escrow |
Seat bands (Business and above)
| Seats | Per seat / year |
|---|---|
| 1 to 250 | $300 |
| 251 to 1,000 | $260 |
| 1,001 to 5,000 | $230 |
| 5,001 and above | $220 |
Each band applies only to the seats inside it. A seat is a Mini that has checked in within 30 days. Small Business has its own flat seat price of $150 because it competes with endpoint licences alone. Business includes 70 seats, so at 100 endpoints it costs within $900 of Small Business and the upgrade is close to free. Enterprise adds a flat $54,000 over Business at any size.
Included in every plan
- Unlimited log ingestion and processing
- Retention for as long as your own storage allows
- Signed detection and decoy updates while subscribed
- Deception on every Mini
- Detection keeps running if a subscription lapses; updates pause
Zero data fees.
Your logs never leave your network, so there is nothing for us to charge by the gigabyte.
Never switched off.
If a subscription lapses, detection keeps running on the last signed models. Updates and new seats pause until renewal.
One seat, three products.
A krupiq seat covers what you would otherwise buy as an EDR seat, a SIEM ingestion contract and a deception tool. Compare the total, not the seat.
Discounts and partners
Voluntary reporting
15% off for sharing anonymised indicators.
Hashes, attacker IPs, technique tags and decoy hits. Never raw logs. Opt in and out from the console, with a view of exactly what was sent.
White label
Your brand, our engine.
MSPs and hosters buy seats pooled across every customer at 40% off the banded price, with a $12,000 yearly minimum and no per-customer platform fees. They set their own retail price and mint sub-licences per customer. One-off rebrand setup of $5,000.
Talk to us about partneringOpen parts
Audit what runs on your machines.
The Mini agent, licence verifier and rule format are planned for open release so anyone can inspect them. The Chimera engine and feeds stay closed.
Commercial terms
| Billing | Annual in advance. Small Business and Business can pay monthly at 20% more. |
|---|---|
| Commitment | 10% off for a 3-year term, paid annually. Price locked for the term. |
| Discount cap | Reporting and commitment discounts stack to a maximum of 25% off list. Partner pricing does not stack with either. |
| Growth | Up to 10% over your seat count is allowed and trued up each quarter at your band price. No hard stops. |
| Upgrades | Move up a plan at any time; unused time on the current plan is credited. Personal fees are credited in full. Plans converge in price at their boundaries, so there is never a cliff. |
| Seat caps | Personal stops at 5 devices and Small Business at 100 endpoints. Business and above have no cap; Enterprise and Sovereign are chosen for their features, not forced by size. |
| Trial | 30 days, 25 seats, every feature, no card. |
| Lapse | Detection keeps running. Updates and new seats pause until renewal. |
Assumptions and sources
Prices are list, in USD, per year. Competitor figures are public list prices and exclude retention add-ons, support tiers and managed services. Competitor totals count only licence and ingestion, so the comparison is conservative.
CrowdStrike Falcon Enterprise: $184.99 per device per year. Next-Gen SIEM: $5.95 per GB of third-party data on AWS Marketplace, with 10 GB a day free for Insight customers. (crowdstrike.com, Realm Security, CrowdStrike FAQ)
SentinelOne Singularity Complete: $179.99 per endpoint per year, as reported; SentinelOne publishes no list price. Microsoft Sentinel: $4.30 per GB pay-as-you-go, commitment tiers of $296, $548, $1,265 and $2,480 per day for 100, 200, 500 and 1,000 GB a day; the calculator picks the cheapest option. (CiphersSecurity, SecurityOperationsCost)
List prices exclude VAT and sales tax, which are added at checkout where they apply. CrowdStrike, Falcon, SentinelOne, Singularity and Microsoft Sentinel are trademarks of their owners; the figures were checked against the sources above on 27 September 2026.
Figures checked 2026-09-27. Prices in USD.