Pricing

Start free. Add what you need, per tenant.

The compliance scanner opens soon and is free forever, with no card and no clock. The paid tiers are priced per tenant, with volume tiers for MSPs. You onboard first and we scope the cost with you afterwards.

Free forever · coming soon

Compliance Scanner

A posture check of your Microsoft 365 tenant against five open frameworks. One tenant, full report.

£0per tenant, no card

Posture scan of one Microsoft 365 tenant
Five open frameworks: Maester, CIS, CISA SCuBA, EIDSCA and ORCA
Findings with severity, evidence and remediation guidance
Licence-aware results
PDF report by email
Up to four scans a month, on demand
Nothing to install: Microsoft consent, minutes to set up

Opening soon. We will email you the day it does. No card, ever.

Harden and detect

Zerotouch

Baselines deployed as code and detections kept current, for teams that run their own security.

Per-tenant pricing, volume tiers for MSPs

Everything in Free
Intune, Conditional Access and Entra RBAC baselines deployed as code
Drift detection against your deployed baseline
Defender detections mapped to MITRE ATT&CK, updated continuously
Coverage map and ATT&CK Navigator export
Jira tickets from findings
Up to ten team members and thirty scans a month

Onboard — talk cost after →

Onboard first, then we scope cost and payment with you.

Fully managed

Managed MDR

Microsoft Sentinel, AI agents on every incident and Reddome analysts on every approval gate.

Custom scope, partner economics

Everything in Zerotouch
Microsoft Sentinel deployment and detection baseline
AI agents triage and enrich every incident, 24/7
Reddome analysts on every approval gate
Containment approved in Slack, Teams or the portal
Cross-tenant SOC queue with SLA tracking
Full audit trail of every agent action
Dedicated onboarding engineer

Onboard — talk cost after →

Partner programme available.

What each tier unlocks

The loop, stage by stage.

Every tier runs on the same platform and the same audit trail. Higher tiers switch on more of the loop.

Stage	Free	Zerotouch	Managed MDR
AssessPosture scan, findings, PDF report
HardenIntune, Conditional Access and RBAC baselines, drift detection	—
DetectDefender detections mapped to ATT&CK, coverage map	—
InvestigateSentinel incidents triaged and enriched by agents	—	—
RespondContainment approved by a person, executed through Graph	—	—
ImproveFleet health, weekly digest, access review report	Basic
PeopleWho sits on the approval gates	You	You	You and Reddome analysts
Team members	1	Up to 10	Up to 50
Scans a month	4	30	Unlimited

How paid tiers switch on. There is no self-serve checkout. You onboard, we have a short scoping call, and Reddome activates the tier and issues a payment link. Managed MDR customers also agree the SOC scope and SLA on that call.

Questions

Pricing questions

How does pricing work?

The Compliance Scanner is free forever: no card, no trial clock. Zerotouch and Managed MDR are the two paid tiers, priced per tenant. You can onboard today and we scope cost with you on a short call afterwards. Partner pricing is volume-tiered.

How do I move from Free to Zerotouch or Managed MDR?

Request the tier from inside SocGenie, or email hello@socgenie.io with your tenant count. We come back with a scoped quote and a payment link. Your tenant, findings and history carry over; there is no re-onboarding.

Can an MSP bring many tenants?

Yes, that is what the partner console is for. Customers connect through GDAP delegated access, pricing is per live tenant with volume tiers, and you keep the customer relationship and the commercial terms. See the partner programme.

Is there a contract minimum?

Free is free, with no commitment. Paid tiers are monthly rolling by default. Annual terms attract a discount that we include in the quote.

Where does my data live?

SocGenie runs on Microsoft Azure in the UK. Your telemetry stays in your Microsoft tenant; SocGenie reads it through delegated, least-privilege consent and never uses it to train models. Details on the security page.