One platform. Continuous defense.
Straightforward list pricing for the AI SOC. Scale with add-ons, not surprise overage.
Private beta — final pricing is confirmed when your workspace is provisioned.
Core SOC
Detection, triage, and hunting for your security team.
- 10 seats
- Up to 100 endpoints · 10 data sources
- 30-day hot retention
- Detection, alerting & AI triage
- Threat intelligence + MITRE ATT&CK
- Threat hunting + risk scoring
- Live dashboard + standard reporting
Advanced SOC
Everything in Core, plus advanced analytics and validation.
- 25 seats · larger asset/data allowances
- 90-day retention
- Behavioral analytics + AI agents
- Purple team + control validation
- Source-code security
- Advanced compliance + integrations
- Priority support
Advanced Continuous Defense
Advanced SOC unified with continuous pentesting — one platform.
- Everything in Advanced SOC
- Continuous authorized pentesting
- Purple team + control validation
- Executive reporting
- 25 seats
- 90-day retention
- Priority support
Enterprise
Custom deployment for large or regulated organizations.
- Unlimited seats + RBAC
- Custom retention & high-volume ingestion
- SSO / OIDC
- Private pentest runner
- Dedicated infrastructure + enhanced SLA
- Detection engineering + MSSP / white-label
Everything in each plan.
| Feature | Core SOC | Advanced SOC | Adv. Continuous Defense | Enterprise |
|---|---|---|---|---|
| Core SOC | ||||
| Seats | 10 | 25 | 25 | Unlimited + RBAC |
| Hot-data retention | 30 days | 90 days | 90 days | Custom |
| Detection, alerting & AI triage | ||||
| MITRE ATT&CK + Sigma rules | ||||
| Incident management + risk scoring | ||||
| Threat intelligence | ||||
| Threat hunting | ||||
| Live dashboard + standard reporting | ||||
| Advanced SOC | ||||
| Behavioral analytics + AI agents | — | |||
| Purple team + simulations | — | |||
| Control validation | — | |||
| Source-code security | — | |||
| Advanced compliance | — | |||
| Integrations | — | |||
| Continuous Defense | ||||
| Continuous authorized pentesting | — | — | ||
| Executive reporting | — | — | ||
| Governance & scale | ||||
| Multi-tenant isolation | ||||
| Support | Standard | Priority | Priority | Priority + dedicated |
| SSO / OIDC | — | — | — | |
| Private pentest runner | — | — | — | |
| Dedicated infrastructure + SLA | — | — | — | |
| MSSP / white-label | — | — | — | |
Scale any dimension without a tier jump.
Before you ask.
How does billing work?
Plans are billed per tenant — monthly, quarterly, or annually. These are list prices with no lock-in framing; pick the cadence that suits you. Enterprise is custom.
What's included in my plan?
Each tier has a defined allowance for seats, endpoints, data sources, ingestion, and hot retention. Need more? Expand any dimension with an add-on rather than jumping a whole tier.
Can I change plans later?
Anytime, from the in-app billing portal. Nothing you've configured — rules, connectors, history — is lost when you move between plans.
Do you offer a trial?
GomuGuard is in private beta — request access and we'll set you up with a hands-on evaluation on your own data before you commit.
Not sure which plan fits?
Request access and we'll help you scope the right tier for your team — and get you running on your own data.
Request access