Pricing · per workload, billed annually

One price per workload. Warranty included.

A workload is any cloud VM, container host/node, or on-premises server. Every tier carries an aggregate parametric warranty limit — the coverage your client can point an auditor or underwriter at.

SentinelVisibility & posture baseline
$6 – $8per workload / month

Mid-market enterprises locked into multi-year vendor contracts, seeking real-time posture validation and insurance audit readiness.

Parametric warranty included
Up to $250,000
  • Workload scope: cloud VMs (AWS EC2, Azure VM, GCP) and on-prem physical/virtual servers
  • Posture ledger — risk checkpoints hashed and anchored to an immutable distributed ledger every 24 hours
  • Read-only underwriter / auditor portal with cryptographic proof of posture
  • External attack surface, exposed-port and documented-CVE mapping
  • Static SLA remediation windows (14-day / 30-day by public exploit availability)
  • Parametric breach warranty on vectors inside their compliance grace window
  • Non-invasive overlay on top of the existing security stack
Subscribe for this tier
VanguardMost deployed
$12 – $16per workload / month

Core enterprise workloads requiring continuous digital twin attack-path simulation and dynamic SLA risk mitigation.

Parametric warranty included
Up to $1,000,000
  • Everything in Sentinel, plus:
  • Continuous digital twin attack-path simulation per workload
  • AI reasoning engine constructing live attack narratives — not limited to known CVE matching
  • Dynamic SLA risk mitigation tied to real-time SLA adherence
  • Automatic remediation obligations and premium adjustments when a critical path is identified
  • Aggregate warranty tied to real-time SLA adherence
Subscribe for this tier
SovereignFull autonomy & zero-day hedging
$22 – $28per workload / month

Regulated sectors — BFSI, critical infrastructure, FinTech — demanding zero-day attack narrative reasoning and custom parametric breach remediation.

Parametric warranty included
Up to $5,000,000+
  • Everything in Vanguard, plus:
  • Zero-day attack narrative reasoning across assets, configuration and lateral movement
  • Custom parametric breach remediation terms
  • Parametric warranty backed by underwriter syndicates
  • Compliance-grade evidence packs for regulatory frameworks
  • Named response commitments and custom data residency
Subscribe for this tier

Two ways to onboard

One size does not fit all. Some clients want to run their own onboarding, others want an account manager to sit with them through it.

1 · Self-serve — your client subscribes

Send the pricing page with a business partner or account manager referral code. The code carries the negotiated discount through checkout and attributes the account back to the partner.

https://demo.apexaegis.app/pricing?ref=YOUR-CODEOpen ApexAegis self-serve pricing →
2 · Guided — an account manager runs it

For clients who would rather not self-onboard, the managed storefront lets an ApexAegis account manager or Teceze professional sit with the client, walk the product catalog and pricing tiers, and drive the onboarding end to end.

Open the managed storefront →

Commercial add-ons

High-density container surcharge

Kubernetes nodes running more than 30 microservices/pods bill at an adjusted host rate — $1.20 per vCPU or a flat host multiplier.

MSP margin structure

20–30% margin for partners bundling ApexPhalanx into managed service packages, with automated conversion credits when accounts migrate to the core platform at renewal.

Digital twin — two deployment options

Bring your own cloud API keys and the twin runs inside your own tenancy, or we deploy and operate it in our sandbox cloud. Priced at deployment and confirmed in your quote.