What sets your number

What each product counts

Every product is priced on the thing that actually drives its cost and its value to you. Those are not the same unit, and forcing them into one would misprice most of the portfolio.

Four of these are available today — ShareCare, SecurityPortal, WebScan and MailTrust. ConditionalAccessPortal and CompliancePortal are built and close but not released; their prices are published so the number is settled before they ship rather than negotiated after. Dredd and PosturePortal are further out, and neither carries a list price.

License flavours

See it. Govern it. Act on it.

Each tier contains the one below. Moving up is an entitlement change, not a migration or a reinstall — the capability is already in the product, waiting to be switched on.

Tier 1 · Visibility

See it

Know what is actually there

• Continuous inventory of the estate the product covers
• Risk scoring and findings, deduplicated and tracked over time
• Reporting and export, including scheduled reports
• Daily scheduled scans, plus on-demand scans whenever you want one
• Strictly read-only — nothing is written to your tenant on this tier

Most common

Tier 2 · Governance

Govern it

Decide, record and prove

• Everything in Visibility
• Scheduled scans every six hours
• Policies and campaigns — including owner-delegated access reviews
• Approvals and four-eyes sign-off on sensitive actions
• Waivers and risk acceptance with mandatory expiry, so an exception cannot quietly become permanent
• Evidence packs and the tamper-evident trail behind them
• Fleet views across every tenant or domain you manage

Tier 3 · Automation

Act on it

Let it fix things

• Everything in Governance
• Hourly scheduled scans — the tightest loop between a change and its finding
• Automated remediation and write-back into the customer's tenant or DNS
• Simulate, then execute — with a grace window and undo where the plane supports it
• Two independent gates: the license entitlement and the connector's own remediation consent. Either one off means nothing is written

Why the top tier is separate

Tiers 1 and 2 read and record. Tier 3 changes your production tenant. That is a difference in kind, not degree, so it is a distinct purchase and a distinct consent — and it stays revocable without losing the visibility and evidence you already paid for.

Cadence is a tier feature. Looking is not.

The tiers set how often a scan runs on a schedule — daily, every six hours, hourly. They never limit how often you may look: an on-demand scan is available on every tier, at any time, as many times as you need. Nothing about an incident should require a purchase order.

The distinction matters and it is deliberate. Continuous scanning is the cost we carry on your behalf, and tighter cadence genuinely costs more to run — so a tighter loop between a change and its finding is something you buy. But charging per scan would teach you to look less often, which is the one behaviour this product exists to prevent. A floor on automatic frequency does the opposite: every tier still sees everything, and the higher tiers see it sooner.

The figures, product by product

Pick the one you are buying. Everything that applies to the whole account — the floor, the volume bands, and what does and does not move your number — is below, outside the tabs, because it applies whichever you pick.

What you pay for

There is no platform minimum. You pay for the products you hold, in the unit each one counts, at any size. The tenancy, auth, audit trail, findings store, reporting and scheduling that every product runs on are included rather than charged separately. A 30-user tenant on ShareCare Visibility computes $60 and pays $60.

What moves the number

• Which tier you buy. Each product tab above lists what its tiers include.
• How big the estate is, in the unit that product counts.
• Whether you are a provider. Users, sites and domains pool across managed tenants, compliance frameworks are licensed once across the book, and the per-tenant floor applies as greater-of rather than added on top.

Your own tenant, if you are a partner

$50 a month, every product, every tier, on the tenant you run your own business from. The same estate computes somewhere between $260 and $640 at list, so this is not a discount and is not described as one — it is deliberately below what a tenant costs to run, which means it costs us money and is meant to.

The reasoning is plain enough to publish: a provider who runs this on themselves every day can demonstrate it from a live tenant instead of a slide, and will find our mistakes before your clients do. That is worth more to us than the margin on one small tenant.

• Your own tenant — the domain on your provider agreement, checked against it.
• Requires an active provider agreement. It is a partner benefit, not a tier to sign up for.
• Everything included, up to 50 users. Past that it becomes ordinary pricing, because past that you are not a small business running a tool, you are an estate using one.
• Not for client tenants, and not resellable. Client tenants are priced as client tenants.

How metering works

We meter the estate, never the activity

The rule we hold ourselves to: never meter the thing we want you to do more of. Metered scanning teaches you to scan less, discover less and get less value — and then to conclude the product never found anything.

Never per scan

Scan hourly or nightly; it costs the same. Per-scan pricing would make you widen your schedule to save money, which defeats the entire point of continuous assurance.

Never per finding

"The worse your posture, the more you pay to learn about it" is the most perverse metric in this category. Findings are free. Fixing is free.

Estate, not effort

Users, domains, tenants or monitored scope — depending on the product. Each one correlates with our cost and your value, and each is a number you already know at quote time.

Enforcement: two different failures, two different behaviours

Situation	What happens	Why
Not entitled to a product or capability	The capability is refused outright	An entitlement is a capability gate. If you have not bought write-back, nothing writes back.
Over your unit count	Warning at 100%, a banner at 110%, trued up on the next invoice	Units are a commercial measurement, not a kill switch. Growing past your estimate is a billing conversation.
Drifting over it quietly	We review overage monthly and come to you	A soft cap only works if somebody reads it. The review is ours to run, so the first you hear of a mismatch is a conversation — not a surprise line on a renewal.
Any commercial dispute at all	Your scans keep running	Hard-capping a security scan mid-incident is a security failure. We do not do it.

Where allowances genuinely apply

Two things carry a real external cost per use, are optional, and are bursty. They get an included allowance rather than being folded into the base price. Everything else — scans, remediation actions, findings, evidence exports — is uncapped.

Allowance	Included	Beyond that
Deliverability tests	50 per month, per domain	Charged per test — we send and receive real mail
DMARC aggregate report volume	An allowance per domain, sized to normal sending volume	Additional blocks — ingesting, parsing and storing reports scales with how much mail you send, not with how many domains you have
AI remediation guidance and report narratives	Fair use	Add-on packs — there is a real per-call model cost

What never moves it

How many products you take. There is no suite discount. Each product is priced on its own and adding one costs what that product costs — no bundle, no package, no number that only appears if you buy everything. What running more than one does get you is structural rather than promotional: one tenancy, one identity, one audit trail across the account, and findings that land somewhere they are already useful.

How often you scan, how many findings you have, how much you remediate, or how much evidence you export. None of those are metered, deliberately — charging for them would teach you to look less often, which is the one behaviour this product exists to prevent.

Nor does how you pay. A year costs twelve months. Annual and monthly are a cash-flow decision, not a lever: there is no discount for committing and no penalty for not. If you would rather pay yearly because it is one invoice instead of twelve, do that — it will not change the number, and nobody here will pretend it should.

WebScan takes that further: every tenant scans at no cost, indefinitely, one URL at a time. The licence buys what happens after the scan — the history, the schedule, the audit trail and the evidence. A scan you do not keep cannot prove anything, and the one you do keep is the one we charge for.

Get a number

Tell us the size of the estate. You will get a real figure back, not a discovery call.

Name

Work email

So we can reply. Nothing else is done with it.

Organisation

Your estate

Anything we should know?

Get a real number

Or email jeff@jeffops.com directly.