Build the exact number.
One platform, five capability modules, three operating models. Pick the modules you need, choose per module how much we operate, and move between models at any renewal. No tier is a dead end, and the intelligence sits in the platform, not behind a managed wall.
Same platform. You choose who runs it.
Every module is available in all three models, and you decide per module. Prices below are CHF per user and month at the under 1,000 user band.
Self-serve Platform
- Full SASE and SSE platform
- Public API and documentation
- Self-onboarding
- Portal, docs and standard support
AIOps
- Everything in Self-serve Platform
- AI Copilot and Agents (Lucy)
- Investigations and remediation, 24/7
- HITL (Human-in-the-loop) on critical calls
Mission Control
- Everything in AIOps
- Level-3 engineers, 24/7
- Named TAM (Technical Account Manager)
- Consulting and optimization
Each model includes everything in the model before it. Prices in CHF, per user and month, at the under 1,000 user band. Every module includes AI-powered monitoring, analytics and anomaly detection.
Build your price. Watch it scale.
Set your scale, choose how much we run it, and pick your modules. The estimate updates live against the list below. Indicative, not a binding quote.
Scale · how many users
< 1,000
List
1k-2.5k
-10%
2.5k-5k
-18%
5k-10k
-25%
10k +
Talk
Operating model · who runs it
Run it with our AI. Applies to every module you pick.
Modules · pick what you need
Blended price · per user
AIOps · Rolling out
Estimated annual value
CHF 0Indicative estimate against the published list price. OT is per site and not subject to the user-volume discount. Excludes foundation and expert services. Final band and discount are fixed once we know your user count and sites.
Minimum engagement: CHF 100,000 annual contract value across any mix of modules, foundation and services.
The whole price list, on one page.
CHF per user and month at the under 1,000 user band. Volume discounts apply from 1,000 users, see the calculator above.
| Module and included capabilities | Self-serve Platform | AIOps | Mission Control |
|---|---|---|---|
| Network ConnectSD-WAN and LAN firewall, bandwidth control, path selection, application optimization, T2EE | 5.30 | 7.50 | 8.80 |
| Secure AccessSecure web gateway, ZTNA, CASB, Firewall, transparent proxy | 6.60 | 9.35 | 11.00 |
| Advanced SecurityGenAI security, emerging-threat protection, home for future advanced capabilities | 2.65 | 3.75 | 4.40 |
| Threat DefenseNetwork detection and response, ATP, cloud sandbox, network analytics | 3.65 | 5.15 | 6.05 |
| Email SecuritySecure email gateway, advanced email security, spam engines | 4.30 | 6.10 | 7.15 |
| Secure Access OTOT firewall, industrial segmentation, OT visibility. Priced per site and month, not per user. | 270 | 385 | 450 |
| Complete PlatformAll five user-based modules, with a 15 percent platform advantage included | 19.15 | 27.05 | 31.80 |
Secure Access OT is priced per site and month, not per user. All other modules are per user and month.
Minimum engagement
CHF 100,000 annual contract value, across any mix of modules, foundation and services. Your band and discount are fixed once we know your user count and sites.
Volume discounts by user band are built into the price calculator above.
Not sure where to start? Buy an outcome.
Pre-configured packages. Same modules, same prices, one decision instead of six.
Reduce security operations workload
Take the operational burden off your IT and security teams.
Standardize security controls
The same controls for every user, location and application.
Reduce attack surface
Shrink your exposure and close security gaps.
Improve application experience
Fast, reliable applications for every employee, everywhere.
Accelerate SASE transformation
Move from legacy architecture to SASE on a defined timeline.
Something else?
Combine any modules and operating models. Your architecture, your pace, one price engine.
Sites, connectivity and hardware.
Priced per site rather than per user, because that is how they scale.
| Item | What it covers | Pricing metric |
|---|---|---|
| Last-mile connectivity | Managed internet underlay for your sites, carrier-agnostic | Per site and bandwidth |
| Edge hardware | SASE edge appliances, four sizes plus a server option, RMA included | Per appliance and month |
| LAN Operations | Operation of your local network infrastructure | Per site and month |
| External BGP | Custom routing integration with your carriers | Per site and month |
| Partner Connect | Secure third-party and B2B connectivity | CHF 200 per partner and month |
| Dedicated SSE IP | Dedicated egress IP addresses per SSE PoP | CHF 2,000 per PoP and month |
Human expertise, on demand.
| Service | What you get | Pricing metric |
|---|---|---|
| Security Posture Audit | Full assessment of policies, exposure and gaps, with a roadmap | Per engagement |
| Firewall and Policy Audit | Rulebase review, cleanup and hardening recommendations | Per engagement |
| Benchmarking | Your security and network KPIs against industry peers | Per report |
| Transformation Consulting | Architecture and migration guidance from legacy to SASE | Per day or package |
| Named TAM (Technical Account Manager) | A dedicated technical account manager who knows your setup | Included in Mission Control |
| Support add-ons | Incident Expert Assist, monthly support packs, emergency escalation | Per incident or month |
Billed for work done, not for tokens.
Reactive operations included
Anything reactive is covered by the fixed per-user price. No metering, no surprises when an incident happens.
Proactive work in AI Units
Proactive and autonomous work is metered in AI Units, based on the work performed, never on tokens or API calls.
Visibility and caps
Full visibility, alerts and caps. And human fallback, always.
Three decisions.
Pick your modules
Choose capability modules, or start from an outcome package.
Set your scale
Tell us your user count and sites. Your band and discount are fixed from there.
Choose your operating model
Self-serve Platform, AIOps or Mission Control, per module. Change at any renewal.
No surprises, no dead ends.
Tell us your sites, users and coverage. You get a quote against the list above, not a discovery call disguised as one.