Commercial Model
Cyntara packages are engineered to scale with your estate. Every tier is delivered through the Cyntara Threat Management Platform (CTMP) — combining licensed detection technology with managed operations and governance.
Per Host
Scalable, transparent billing
vCISO
AED 10,000 / month or hourly
Audit-Ready
ISO 27001 · SOC 2 · UAE IA · DESC
Scaleable Packages
Priced per host and scaled to your estate. Every tier is delivered through CTMP with managed operations. Final rates are quoted against your environment, data sources, and integration scope.
Continuous visibility and monitoring for organisations establishing a security baseline.
Custom
Per host · per month
Full MDR for organisations requiring autonomous detection, response, and containment.
Custom
Per host · per month
MDR plus continuous compliance and governance for regulated organisations.
Custom
Per host · per month
End-to-end defence with leadership, incident readiness, and full governance for multi-site enterprises.
Custom
Per host · per month
Per-host rates are confirmed following a scoping assessment. vCISO advisory is included in Assurance and Sovereign — and available as a standalone retainer.
Standalone Engagement
For organisations that need board-level security leadership without the cost of a full-time executive, Cyntara Security provides a Virtual CISO service — delivered as a monthly assessment retainer or retained by the hour.
Typical CISO Services Included
A predictable monthly retainer covering the strategic leadership and governance capabilities above, scoped to your organisation.
Also Available
Flexible hourly engagement for advisory, reviews, and point-in-time governance needs — no long-term commitment required.
Discuss a vCISO RetainerIncluded within the Assurance and Sovereign packages.
Enhance Your Protection
Available alongside any tier to deepen protection and governance while keeping costs predictable.
Priority access to senior-led containment, forensic investigation, and structured recovery.
Containment · Forensics · Recovery
Adversarial testing to identify exploitable weaknesses before attackers do.
Exploit-aware · Prioritised findings
Configuration review and posture monitoring across AWS, Azure, and Google Cloud.
Misconfiguration · Shadow resources
Continuous external discovery of exposed assets, domains, and leaked credentials.
External discovery · Credential leakage
Independent evaluation of third-party security posture and supply-chain exposure.
Due diligence · Third-party posture
Reduce human risk with role-appropriate education and phishing simulation.
Phishing simulation · Role-based
Supported integrations for advanced phishing, impersonation, and BEC protection.
Phishing · Impersonation · BEC
Design and sequencing of an identity-first, least-privilege zero-trust model.
Identity-first · Continuous verification
Evidence tracking and control mapping to support audit readiness against your target framework.
ISO 27001 · SOC 2 · UAE IA · DESC
Add-ons are scoped and priced individually. Compliance tooling supports governance and audit readiness — it does not guarantee certification or audit outcomes.
Commercial Discipline
We keep costs predictable through per-host pricing — you pay for what you protect, and the model scales with your estate rather than against it.
Simple, per-host pricing that scales cleanly with your estate.
Transparent scoping with no hidden charges or forced add-ons.
You are not penalised for generating or retaining security data.
Flexible terms without forced upsells or restrictive contracts.
This ensures organisations of any size can access enterprise-grade security and governance — without the enterprise price tag.
Next Step
We will walk through your environment, your objectives, and your compliance obligations — then recommend the package that fits best.