$0.24 per vCPU per hour through AWS and Azure Marketplace, for both HailBytes SAT and HailBytes ASM. No per-seat fees, no per-asset fees, no per-scan fees.
~$4,200/year on the recommended 2 vCPU instance, supporting unlimited users on a single instance.
~$4,200/year on a 2 vCPU instance for moderate workloads. Larger surfaces typically run on 4–8 vCPU ($700–$1,400/month).
Most security tools charge per seat (SAT) or per asset (ASM), so the bill scales linearly with the size of your organization. HailBytes prices on the underlying compute, which means cost stops scaling once you hit a single instance per environment. A 200-person company and a 5,000-person company can run on the same 2 vCPU instance for the same ~$4,200/year.
For MSSPs and pen-test firms reselling under their own brand, the math is even better. One instance per client at a flat infrastructure rate, with your managed-service fee on top. And via AWS Channel Partner Private Offers (CPPO) or Azure Multiparty Private Offer (MPO), you can resell HailBytes itself at a 15–30% margin over wholesale through the customer’s own marketplace bill — their purchase counts toward their EDP / MACC commit, and you capture platform margin on top of services. See the MSSP margin economics deep dive and the MSSP resources hub for the full mechanics.
vCPU size is driven by campaign throughput — emails per send wave and concurrent campaigns — not by headcount. One marketplace instance handles unlimited users, so the bands below are throughput profiles; the typical org size is secondary guidance, not a seat cap.
| Workload profile | Typical org size | Recommended | Hourly | Monthly (~730 hrs) | Annual |
|---|---|---|---|---|---|
| Standard campaigns, steady send cadence | Up to 10,000 | 2 vCPU | $0.48 | ~$350 | ~$4,200 |
| Large or frequent send waves | 10,000–25,000 | 4 vCPU | $0.96 | ~$700 | ~$8,400 |
| Continuous multi-campaign throughput | 25,000–50,000 | 8 vCPU | $1.92 | ~$1,400 | ~$16,800 |
| Enterprise-wide concurrent sends | 50,000–100,000 | 16 vCPU | $3.84 | ~$2,800 | ~$33,600 |
Numbers cover the marketplace charge (software + infrastructure). Sizing scales with send throughput, not seat count; the hourly rate stays $0.24/vCPU.
MSSPs: size per tenant, not per total managed headcount. A single 2 vCPU instance handles a whole client’s campaigns regardless of that client’s employee count — 50 single-tenant clients of 200 employees each run on 50 small 2 vCPU instances, not one large one. See Pricing for MSSPs below.
ASM instance size is driven by the size of the attack surface — the number of monitored scan targets and how often they’re scanned — not by employee count. As with SAT, one instance handles unlimited findings; the bands below are scan-scope profiles.
| Scan scope | Recommended | Hourly | Monthly (~730 hrs) | Annual |
|---|---|---|---|---|
| Up to 500 targets | 2 vCPU | $0.48 | ~$350 | ~$4,200 |
| 500–5,000 targets | 4 vCPU | $0.96 | ~$700 | ~$8,400 |
| 5,000–50,000 targets | 8 vCPU | $1.92 | ~$1,400 | ~$16,800 |
Scan scope counts distinct monitored targets (domains, hosts, IPs). Continuous or high-frequency scanning of large surfaces scales linearly; the hourly rate stays $0.24/vCPU.
The vCPU bands above size a single instance. Topology is a separate axis: the same marketplace image deploys into one of three reference shapes, and HA / auto-scaling add managed Postgres, Redis, and load balancing on top of the per-vCPU meter. The meter rate is identical across all three — the delta is infrastructure shape, not licensing. Numbers are indicative, us-east-1, procurement-grade sizing.
| Shape | Topology | Infra | + per-vCPU meter | All-in / month |
|---|---|---|---|---|
| Single instance | 1× VM, co-located Postgres | ~$85 | ~$350 (2 vCPU) | ~$435 |
| HA hot-hot | 2× VM Multi-AZ + managed Postgres + Redis + LB | ~$515 | ~$700 (4 vCPU) | ~$1,215 (≈ 2.8× single) |
| Unlimited scale | ASG / VMSS + read replicas + Redis + LB | ~$1,200 | ~$1,050 (6 vCPU) | ~$2,250 at 3-instance min; ~$4,700 at 10 instances |
See the three deployment topologies on the marketplace page for what ships in each shape and who runs which, and the full side-by-side cost shapes reference (AWS + Azure) in the Terraform modules repo.
A 5,000-employee org running HailBytes SAT on the recommended 2 vCPU instance vs. typical per-seat list pricing for incumbent platforms. Per-seat numbers are list ranges; private-offer discounts narrow but rarely close the gap.
| Platform | Pricing model | List rate | 5,000-seat annual |
|---|---|---|---|
| HailBytes SAT | Per vCPU (compute) | $0.24/vCPU/hour | ~$4,200 (2 vCPU) |
| KnowBe4 (Diamond) | Per seat / year | $30–$45/seat | ~$150,000–$225,000 |
| Proofpoint Security Awareness | Per seat / year | $25–$50/seat | ~$125,000–$250,000 |
| Hoxhunt | Per seat / year | $40–$60/seat | ~$200,000–$300,000 |
| Cofense PhishMe | Per seat / year | $25–$40/seat | ~$125,000–$200,000 |
Per-seat figures are indicative list-price ranges, not quotes. None of these vendors publish per-seat list pricing, so the ranges are synthesized from publicly reported RFP responses, partner channel quotes, and analyst/peer comparisons current as of June 2026; your negotiated or private-offer rate will differ and should be confirmed by a direct quote before use in procurement. Each vendor name links to our detailed head-to-head comparison. Where HailBytes SAT lands relative to the per-seat platforms gets more favorable as headcount grows; the breakpoint where TCO swings strongly in our favor is around 250 seats. That 250-seat figure reflects the single-org per-seat comparison above; for vCISOs and MSSPs running one instance per client, the relevant comparison is flat infrastructure cost (~$350/month) vs. per-seat cost at that client’s headcount — favorable at much smaller sizes.
vCISOs embed per-client platform cost into a fixed retainer rather than reselling via CPPO/MPO — the math is simpler than the MSSP model: client count × ~$4,200/year per client (a 2 vCPU SAT instance), folded into the retainer fee the vCISO sets on top.
| Client book (2 vCPU each) | Platform cost / year | Per-client / month |
|---|---|---|
| 5 clients | ~$21,000 | ~$350 |
| 10 clients | ~$42,000 | ~$350 |
| 20 clients | ~$84,000 | ~$350 |
This is the SAT platform cost; the retainer fee on top is the vCISO’s to set, with no CPPO/MPO resale mechanics involved (see Pricing for MSSPs for that model). See the vCISO resources hub for the full retainer model discussion.
Model the cost of running HailBytes across a managed client base. Each single-tenant client runs on its own instance — typically 2 vCPU (~$4,200/year) — so infrastructure scales linearly with client count while replacing the per-seat platform cost you’d otherwise carry or resell.
| Clients (2 vCPU each) | HailBytes infrastructure / year | Equivalent per-seat SAT* |
|---|---|---|
| 10 clients | ~$42,000 | ~$350,000 |
| 25 clients | ~$105,000 | ~$875,000 |
| 100 clients | ~$420,000 | ~$3,500,000 |
*Illustrative comparison assuming an average of 1,000 seats per client at a $35/seat blended list rate ($35,000/client/year). Your client mix and negotiated rates will differ; the point is that HailBytes infrastructure cost stays flat per tenant while per-seat cost scales with every seat. The per-vCPU model beats per-seat alternatives for essentially any client above ~250 seats.
ASM’s MSSP model is architecturally different from SAT’s. Instead of one instance per client, a single shared ASM instance carries multiple client Projects, and cost is attributed proportionally per Project via /billing/projects/ rather than a fixed per-client sticker. A multi-client book typically runs 4–8 vCPU (~$700–$1,400/month) on that one shared instance.
| Clients | SAT infra/year (2 vCPU each) | ASM infra/year (shared 4–8 vCPU) | Combined/year |
|---|---|---|---|
| 10 clients | ~$42,000 | ~$8,400 | ~$50,400 |
| 25 clients | ~$105,000 | ~$8,400 | ~$113,400 |
| 100 clients | ~$420,000 | ~$16,800 | ~$436,800 |
ASM cost is one shared instance attributed across clients, so it stays roughly flat as client count grows — stepping up only when scan volume needs more vCPU — unlike SAT’s one-instance-per-client linear scaling. Run your own numbers with the MSSP ROI calculator.
On top of the infrastructure math, AWS Channel Partner Private Offers (CPPO) and Azure Multiparty Private Offer (MPO) let you resell the HailBytes platform at a 15–30% margin over wholesale through each client’s own marketplace bill — their purchase draws down their EDP / MACC commit, and you capture platform margin on top of your managed-service fee. For per-tenant operational mechanics (provisioning, white-label branding, clean client offboarding), see the MSSP resources hub and the MSSP margin economics deep dive.
Committed multi-year private offers improve the wholesale baseline: per the partner-resell program, a 2-year commitment is 10% off standard pricing and a 3-year commitment is 15% off. Per-client volume discounts also step the wholesale rate down as your client count grows; exact thresholds and wholesale rates are set in the partner-resale authorization issued at enrollment. See /partner-resell/ for the full discount mechanics.
Full ELv2 source-available license. Read, audit, and modify the source. Source-available means your security team can review every line that runs in your environment.
The marketplace bill includes the underlying VM, storage, and networking. One vendor relationship, one invoice through your AWS EDP or Azure MACC commit.
Continuous platform updates, security patches, and detection-rule refreshes pushed to your instance. No extra maintenance fee.
The marketplace price covers the platform. Optional Cloud Support Hub tiers add SLAs, deployment assistance, and dedicated security engineers.
Model the marketplace meter for any vCPU configuration at the $0.24/vCPU/hour rate. All math runs in your browser — nothing is sent anywhere.
Estimates only, not a quote — covers the marketplace charge (software + infrastructure) on a single instance at $0.24/vCPU/hour; HA and auto-scaling shapes add infrastructure on top (see Deployment Shape Costs).
For multi-vCPU and topology modeling, use the full interactive calculator on the marketplace page.
No. One marketplace instance handles unlimited users (SAT) or unlimited targets (ASM). Cost is set entirely by the size of the VM you run.
Yes. Marketplace charges count toward AWS EDP and Azure MACC commits, which is why most enterprise procurement teams prefer the marketplace path.
Yes. 30 days free through AWS Marketplace and Azure Marketplace, including the underlying infrastructure on most starter VM sizes.
Annual and multi-year private offers are available for both products with discounts off the marketplace rate. Request a private offer for terms.
HailBytes ships as a Bring-Your-Own-Cloud marketplace image — the full stack runs inside your own AWS or Azure account, in the region you pick. Scan data, target lists, and campaign results never leave your tenant. US (including AWS GovCloud and Azure Government), EU/EEA, and Latin American (sa-east-1, brazilsouth) regions are supported. See the trust center for details.
There is no shared multi-tenant data plane. Each customer — and, for MSSPs, each client — runs a single-tenant instance in its own cloud account, so one tenant’s data is never reachable from another. See the procurement FAQ.
Availability is governed by the deployment topology you run — single VM, HA hot-hot, or auto-scaling. The vendor-side support SLA is 99.5% availability, with higher commitments available through Cloud Support Hub tiers.
The marketplace price covers the platform. Optional Cloud Support Hub tiers add response-time SLAs, deployment assistance, and dedicated security engineers.
Need a structured rollout? Walk the proof-of-concept process for evaluation stages and success criteria, or see how to buy through AWS or Azure Marketplace.
Use committed spend, request a private offer, and clear security review faster — the full procurement checklist for buying security tooling through the cloud marketplace. Instant access.
Pick the product you want to try. We'll deploy a free trial on AWS or Azure and walk you through setup.
30-day free trial on AWS or Azure. Guided onboarding. No credit card required.
30-day free trial on AWS or Azure. Guided onboarding. No credit card required.