Pricing

Priced to your deployment. Not to your seat count.

Three deployment postures. One engine. We quote after a short discovery call so the number reflects your actual environment — not an assumed enterprise average.

Cloud

Managed sensors, zero infra on your side.

Sensors managed by Archon Labs
Managed sensor in the US (more regions on request)
Canary-trip webhooks: Slack, Teams, PagerDuty, generic
Automatic Cloudflare blocking (AWS WAF and iptables supported)
Per-session dossiers in the console
Unlimited operator seats
Standard support (24-hour response)

Book a scoping call

Enterprise

Hybrid meshes, MSSPs, and large SOCs.

Everything in Cloud
Self-hosted ingest cluster option
Multi-sensor mesh with node & cluster attribution
HMAC-signed sensor channel
Evidence exports (STIX 2.1 · MISP, via CLI)
Custom protocol emulation on request
Priority engineering support

Book a scoping call

On-Premises

Air-gapped, regulated, or sovereign-cloud environments.

Everything in Enterprise
Go binary or signed container image, optional eBPF module
Zero outbound network requirement
Remote install support

Book a scoping call

Questions about procurement or a specific environment? Contact [email protected].

What every tier includes

Same daemon, same detection engine, same per-session dossiers
Runs in your own cloud or ours — hosted in the US today
Unlimited operator seats — pricing does not scale by user
Ninety-day trial available on any tier by request
Cancellation with 30 days notice; data export on termination

Common pricing questions

Why don’t you publish prices?: Because "how much does this cost" is the wrong first question. The right first question is "will this catch the adversaries we care about, and how much of my analyst time will it save?" We quote after a 30-minute discovery call so the number is grounded in your deployment shape, not in a spreadsheet marketing built.
Is there a free tier?: No permanent free tier. We do offer a 90-day trial on any of the three tiers, with a full production sensor and a live dossier stream, for prospects who want to prove value against their own traffic. Request via the demo form.
How is Cloud priced?: By sensor count, expected session volume, and support tier.
How is Enterprise priced?: By deployment complexity — number of regions, number of sensors, and whether you self-host the ingest cluster. Custom quoted after a scoping call.
How is On-Premises priced?: Annual license, scoped to environment count and support level. Includes install support and updates. Custom quoted after a scoping call.
Do you do PoCs?: Yes. We suggest 4–6 weeks, ending with a review of the dossiers, campaigns and blocks from your own traffic. Contact [email protected] to scope.

Ready to scope? Book a 30-minute discovery call. We will not send you to a marketing sequence. You'll talk to the engineer who built blackpot.io, and we'll quote based on what you actually need.