Pricing
Free for up to 10 people. €13 per person for detection that acts.
No annual minimums, no seat caps, cancel monthly. Sign-up creates a Free workspace — no card, no trial to manage. Core, Protect and Complete aren't self-serve yet; talk to us and we'll set one up. Endpoints, devices and AI investigations are included as fair-use allowances; the one thing we still meter is infrastructure log volume, and the rate is published below.
These figures are provisional and not yet contractual.
The pricing model is recommended, internally costed, and approved by the owner for engineering to build — but it has not been announced as a public commitment, and it is not contractual. The autonomy boundary described per tier is enforced by the licence today, AI spend is capped per tenant per day, and the commercial meter for endpoints and non-human identities records a measured daily snapshot per tenant — so those allowances are measured facts rather than statements of intent. If you need a firm quote, ask us for one and we will put it in writing.
What specifically is not settled
- Sign-off for a public announcement. The figures are approved internally and are what checkout actually charges; what has not happened yet is a public commitment that a reader can hold us to as a long-term promise.
- The MSP wholesale ladder, nonprofit/education/startup discounts and referral credits are published here and priced in the licence catalogue, but none of the underlying Stripe coupons exist yet — ask your account contact to apply one rather than expecting self-serve checkout to find it automatically.
Reviewed 2026-09-27
Free, forever, up to 10 people
No cardSingle sign-on, OIDC, SAML and API keys · Passkeys and hardware security keys · Adaptive multi-factor with behavioural risk scoring · Role-based access with 85 named permissions, and delegated administration. 14 days of history. This is where every self-serve signup starts today — there is no paid trial at signup.
Plans
Drag to price any plan at your own headcount. Each plan raises this to its own minimum automatically.
Core
€6/ person / month
€6 billed annually · €7.2 month-to-month
At 15 people, per year:
€1,080
- Minimum
- 10 people
- Seat cap
- Unlimited
- Log retention
- 90 days
“No security person needed.”
Autonomy ceiling
L3 Recommend: Sentinel-Q builds the fix and cites its evidence; you approve it in one click. Nothing changes on your estate until you do.
Included
- Everything in Free, uncapped
- Endpoint protection with manual response actions
- Microsoft 365 and Google account-takeover detection
- Log collection from Microsoft 365, Entra ID and Google Workspace
- Network zones by address range and country
- Ordered policy engine with a per-rule decision trace
- Full audit trail with an actor and a reason on every entry
Not self-serve yet — talk to us and we'll set it up. Add Privileged Access for your admins from €15/admin/month whenever you need it — you never have to move to a bigger plan just for that.
Talk to us about CoreProtect
Most popular€13/ person / month
€13 billed annually · €15.6 month-to-month
At 15 people, per year:
€2,340
- Minimum
- 5 people
- Seat cap
- Unlimited
- Log retention
- 90 days
“The plan most buyers pick.”
Autonomy ceiling
L4 Act inside the envelope you declare, opt-in per action class. Upgrading here never raises autonomy on its own — every new option still starts at recommend until you turn it on.
Included
- Everything in Core
- Infrastructure log sources: firewall, syslog, HTTP event collector, OpenTelemetry and CloudTrail
- One schema across every source (OCSF 1.6.0)
- Threat hunting and custom detections, mapped to MITRE ATT&CK
- Endpoint sensor for Windows and Linux (macOS pending Apple notarisation)
- Process-tree correlation and behavioural detections
- Reversible response actions with a recorded undo handle, now autonomous inside limits you set
- Privileged Access and Compliance Autopilot available as add-ons, priced per person
Not self-serve yet — talk to us and we'll set it up.
Talk to us about ProtectComplete
€19/ person / month
€19 billed annually · €22.8 month-to-month
At 15 people, per year:
€3,420
- Minimum
- 5 people
- Seat cap
- Unlimited
- Log retention
- 365 days
“Your one or two people get a team's leverage.”
Autonomy ceiling
As Protect, plus role-mining and access-review proposals for your approval, and evidence generation.
Included
- Everything in Protect
- Privileged access included: just-in-time elevation, approvals, SSH and RDP gateway with credential injection
- Session recording, envelope-encrypted, with a keystroke index for review
- Six credential rotation engines, on a schedule
- Access certification campaigns, with reviewer assignment and an audit trail
- Role mining: access structure proposals derived from your observed access, accepted (or not) by you
- Compliance Autopilot included: continuous, scheduled, signed evidence, framework scorecards and an auditor guest portal
- The NIS2, DORA, GDPR and AI Act registers — never paywalled on any plan, automated here
- 365-day retention
- Priority support: 4-business-hour response, guided onboarding for annual customers with 25+ people
- Unlimited non-human identities, unlimited investigations under fair use
Not self-serve yet — talk to us and we'll set it up. Almost always cheaper than Protect plus the equivalent add-ons — see the invariant below.
Talk to us about CompleteComplete is almost always cheaper than Protect plus the equivalent add-ons (Privileged Access, Compliance Autopilot, 1-year retention): at 15 people, €3,420 vs €3,780; at 50 people, €11,400 vs €12,120; at 200 people, €45,600 vs €47,040.
Enterprise
From €28 per identity, per month — priced on scopeYour team keeps the judgement. Everything in Complete · A dedicated cell, in the EU · A data-residency addendum, contractual rather than architectural · 730-day retention.
Allowances
What is included, and what it would cost if you needed more
An unpublished overage rate is a trust problem; a published one you rarely reach is a marketing asset. Most of what other vendors meter, we treat as fair use with no per-unit bill — the one exception is infrastructure log volume, and the rate is here so you can see it.
| Metric | Included | Overage | What that means in practice |
|---|---|---|---|
| Identity, SaaS and endpoint telemetry | Free: hard cap 0.5 GB/day per workspace. Paid: not metered — fair use around 0.1 GB per person per day pooled, about 10x a typical office. | No per-GB bill on any paid plan | This covers Microsoft 365/Entra/Google audit logs, sign-ins, our own sensor, and IAM/PAM audit — the telemetry every plan gets by default. Above the fair-use line for 30 days running, we start a conversation before we start a bill. |
| Infrastructure logs (firewall, syslog, HEC, OTLP, CloudTrail, REST) | Protect and Complete: 1 GB/day per 25 people, pooled, minimum 1 GB/day | Data Boost, €40/month per extra GB/day (see add-ons) | Not included on Free or Core — infrastructure sources are a Protect-and-above capability. This is the one allowance we still meter and cap, because hot Postgres storage is the one place volume genuinely costs us money before an archive tier exists. |
| Devices (endpoints) | Free: 10, pooled. Paid: 2 per person, pooled. Enterprise: 2 per person, custom above. | €2/month per extra workstation or mobile device, €5/month per extra server | Billed automatically in your next true-up if you go over — protection never stops while you decide what to do about it. |
| Non-human identities | Free: 10. Paid: 2 per person, minimum 25. Complete and Enterprise: unlimited. | Not billable | Service accounts, CI runners and AI agents. A conversation above the pool for 60 days, never an automatic invoice — automation should never break because of a licence limit. |
| AI investigations | Free: 3 per person per month pooled (max 30), plus every critical alert. Paid: 20 per person per month pooled, plus every critical alert. | Not billable | If an investigation cost you money, our false positive would cost you money, which is the wrong way round. Beyond the pool the economy model queues alerts below critical with their depth shown; critical alerts are always investigated on every plan, including Free. |
Device overage beyond your plan's pool: €2/month (+20% monthly) per workstation or mobile, €5/month (+20% monthly) per server. Beyond your plan's device pool: 30 days' notice, then billed in the next true-up. Protection never stops while you decide whether to buy more devices or reduce your fleet.
Add-ons
Add exactly what you need
Buy exactly the capability you need on Core or Protect, without moving to a bigger plan for one feature. Two of these are priced and not yet sold — listed rather than hidden, because you may be evaluating us against a vendor who sells one of them today.
Privileged Access (PAM)
€15 per privileged user, per month (€18 month-to-month)
Available on Core, Protect · included in Complete, Enterprise
Vault, JIT, approvals, session gateway and recording, rotation, discovery and vendor access. A privileged user is someone who checks out a vaulted credential, opens a brokered session, or receives a JIT grant that month — EPM elevation requests from any employee are included and never counted. A 15-person company can protect its 2 admins for €15 per admin per month on top of Core or Protect, with no separate floor.
Compliance Autopilot
€3 per person, per month (€3.60 month-to-month)
Available on Core, Protect · included in Complete, Enterprise
Continuous, scheduled, signed compliance evidence, framework scorecards and an auditor guest portal. The NIS2, GDPR, DORA and AI Act registers themselves are never paywalled on any plan — this only adds the automation on top of the one manual evidence bundle every plan already gets each quarter.
Extended retention, 1 year
€3 per person, per month (€3.60 month-to-month)
Available on Core, Protect · included in Complete
Raises log, audit and PAM recording retention from 90 days to 1 year.
Extended retention, 2 years
€2 per person, per month (€2.40 month-to-month)
Available on Complete · included in Enterprise
Raises Complete's 1-year retention to 2 years.
Data Boost
€40 per extra GB/day, pooled, 90 days searchable (€48 month-to-month)
Available on Protect, Complete, Enterprise
Each extra GB/day of infrastructure log ingest beyond the plan's pooled allowance. One-year retention on boosted volume is €100/GB-day until our archive tier ships, then €40.
Priority support
€1.50 per person, per month — minimum €99/month (€1.80 month-to-month)
Available on Core, Protect · included in Complete, Enterprise
The paid path to human time on Core and Protect, whose own Standard support is AI-first (tickets, EU business hours, first response 1 business day). Complete and Enterprise carry Priority support already.
Guided onboarding
€490 per workspace
Available on Core, Protect · included in Complete (annual, 25+ people)
A one-off guided onboarding call to get your first sources, policies and detections configured with us on the line.
Managed Response (partner SOC)
Not yet available€6 per person, per month
Available on Protect and above
A named security specialist for the cases the platform escalates, delivered with a partner. It does not exist yet and we will not pre-sell it. If you need a human on the phone at 3am today, buy that from someone who has one.
EU-resident AI processing
Not yet available€3 per person, per month
Available on Complete and above
Held back deliberately. Our model provider does not currently offer a contractual guarantee that inference runs inside the EU, and we would rather sell you nothing than sell you a residency claim we cannot evidence. This add-on becomes available when the guarantee does.
Every self-serve plan now has a no-annual-commitment monthly band: Priced and purchasable — every self-serve plan has a monthly, no-annual-commitment band.
For MSPs and resellers
A discount ladder that starts at your first client
Qorionix Partner is billed monthly at annual rates, on one consolidated invoice, and the per-client plan minimum is waived for partner tenants.
Authorized
30%Signed agreement, operator-verified, from your first paid client
Silver
40%10 or more paid client workspaces, or 150 or more paid people across your portfolio
Gold
45%1,000 or more paid people across your portfolio
- · Eligible on Core, Protect, Complete.
- · Not-for-resale: A Complete workspace for up to 25 people, for your own organisation — the partner rate never applies to it.
- · Free client workspaces: 25, plus 3 per paid client.
- · Support split: You handle tier 1; we handle tier 2. White-label reports from Silver.
By signed partner agreement — not a self-serve signup option.
Programmes
Nonprofit, education, startup and referral
Nonprofit
40%For as long as you stay verified, re-checked yearly
40% off any paid plan and add-on. Free also extends to 25 people. Verified with TechSoup or a national registry.
Education
40%For as long as you stay verified, re-checked yearly
40% off any paid plan and add-on. Free also extends to 25 people.
Startup
50%50% off in year 1, 25% in year 2, then list
Eligible if incorporated less than 3 years ago, 50 people or fewer, and under €5M raised or holding an accelerator code.
Referral
Give a month, get a month.
The workspace you refer gets its first paid month free (an extra month, on an annual plan). You get one month of your own plan as credit, up to €500, once they pay. There is an opt-in "Protected by Qorionix" badge if you want one.
Discount programmes never stack with each other or with the partner rate.
The comparison
Against four separate vendors, at list price
200 identities, 300 endpoints, one year, list prices as published by each vendor. Licence cost only.
Excluded on purpose: implementation services, which for a large identity vendor commonly run to two and a half times the licence in year one; the half to two full-time staff a privileged-access deployment assumes; and the half a person a log platform needs to stay tuned. Include them and the gap widens considerably. Verify each figure against the vendor's own page before relying on it — this market moves.
At 25 people the effect is starker, and for a reason worth knowing: minimums, not rates, are the small buyer's real enemy. Okta bills per user with a $1,500 annual contract minimum (okta.com/pricing, verified 2026-09-26) — it binds under roughly 21 users. Huntress enforces a 50-to-99-endpoint minimum on direct and reseller purchase at $8.99/endpoint/month, so a 15-person company with 20 laptops pays for endpoints it does not have (huntress.com/pricing, verified 2026-09-27). Qorionix has no seat cap and no annual floor on any paid plan — the smallest minimum is 5 people (€65/month on Protect).
The honest caveat: most 15-to-50-person companies do not own that four-vendor stack. They already pay for Microsoft 365 Business Premium — $22/user/month annual, about €20.37 at 1.08 USD/EUR (microsoft.com, verified 2026-09-26) — and believe Defender is their security programme. Against that, the argument is not that we are cheaper: Protect at €13/person is an increment on top of what they already pay, not a saving, and Business Premium's own security half is real. The pitch is that you already own the sensors and nobody is reading them; Protect works with Entra or Google as the identity source, so buying detection and response needs no SSO migration.
- Identity (published mid tier, per user, per month)
- $40,800
- Endpoint protection (published, per device, per year)
- $29,997
- Log platform, licence plus integration (conservative)
- $60,000
- Privileged access, mid-market (quote only; estimate)
- $20,000
- Four vendors, total
- $150,797
- Qorionix Complete
- ≈ $62,208
Roughly 59% less on licence cost alone, before any of the excluded services and staff.
Need a DPA for procurement?
Self-serve download is not built yet (WP10) — this sends an email instead of a broken link.
Questions
About the money
Find out what an attacker would see
Connect Microsoft 365 and read your own posture report. 82 checks against your real tenant, naming your real administrators, applications and devices. Free, complete, and yours to keep — not a sample with the findings blurred.
No card. No sales call before you have read the report.