Swarm Security Labs
Services & pricing

Defined scope. Predictable investment.

Start with a fixed-scope external baseline or retain ongoing, analyst-reviewed monitoring. Every engagement is bounded by a clear asset inventory, methodology and deliverable.

Recommended first engagement

External Footprint Baseline

A low-disruption view of one organization's observable external presence—built to establish what exists, preserve the evidence and identify what is worth monitoring next.

Up to 3 root domains
Up to 50 validated assets
Evidence-linked inventory
Monitoring recommendations

Fixed scope

$750USD

Begin a three-month monitoring engagement within 14 days and receive a $250 credit toward onboarding.

Scope a baseline

Ongoing visibility

Monitoring with an analyst in the loop.

Automated observations are validated, contextualized and separated from inference before they reach your team.

Monthly report

Monthly Monitoring

For small teams establishing a dependable external inventory.

$750/ month
Covered estate
1 organization · 3 root domains · 50 validated assets
Onboarding
$750 once
  • Monthly analyst-reviewed change analysis
  • Scheduled inventory export
  • Evidence retention and source history
  • Recommended follow-up actions
Discuss this plan

Weekly report + monthly summary

Most popular

Weekly Monitoring

For organizations that need a tighter review and reporting cycle.

$1,100/ month
Covered estate
1 organization · 3 root domains · 50 validated assets
Onboarding
$750 once
  • Weekly analyst-reviewed change analysis
  • Monthly decision-ready summary
  • Scheduled inventory export
  • Prioritized follow-up recommendations
Discuss this plan

Weekly report + monthly briefing

Expanded Monitoring

For broader estates and higher-touch reporting requirements.

$1,750/ month
Covered estate
1 organization · 5 root domains · 100 validated assets
Onboarding
$1,500 once
  • Expanded external asset coverage
  • Weekly analyst-reviewed reporting
  • Monthly stakeholder briefing
  • Priority follow-up scoping
Discuss this plan
Need more than 100 assets or five root domains? We will define a bounded custom scope before onboarding—never an open-ended inventory.

Included

What we observe

  • Certificate-transparency discovery
  • New hostname and subdomain observations
  • DNS and infrastructure changes
  • HTTP availability and response changes
  • Hosting and selected technology changes
  • New or changed public endpoints where observable
  • Scoped lookalike and related-domain observations
  • Analyst validation of notable changes
  • Evidence retention and source history
  • Scheduled inventory exports and summary reporting

Not included

Passive by default

  • Continuous 24/7 SOC coverage or guaranteed real-time detection
  • Incident response, takedowns or immediate emergency availability
  • Internal-network or credential monitoring
  • Authentication, account access or password testing
  • Form submission or high-volume requests
  • Port scanning, vulnerability scanning or exploitation
  • Access-control testing or social engineering
  • Private-account collection or purchased leaked personal data
  • Personal profiling or unsupported attribution

Active validation, penetration testing, incident response and emergency research require a separate scope and written authorization.

One-time engagements

A concrete question. A bounded answer.

Standard fixed scopes in USD. Any material expansion is agreed and priced before collection begins.

01

External Footprint Baseline

One organization, up to 3 root domains and 50 validated assets

$750

02

Expanded Attack-Surface Inventory

Up to 5 root domains and 100 validated assets

$1,500

03

Corporate Infrastructure Map

Domains, DNS, certificates, IPs, ASNs, hosting and relationships

$900

04

Vendor Verification Brief

One company or vendor and up to three defined verification questions

$750

05

Brand-Exposure Snapshot

One brand, lookalike domains, certificate and hosting observations

$650

06

Historical Infrastructure Review

One organization, archive, domain, certificate and hosting history

$850

07

Web Technology & Third-Party Map

One public application, technologies, scripts, services and third parties

$600

08

Public JavaScript Endpoint Inventory

One authorized web property, public scripts and observable endpoints

$750

09

Monitoring Readiness Assessment

Baseline inventory plus a recommended monitoring plan

$600

10

Claim-Evidence Matrix

Up to ten corporate or technical claims, sources and confidence ratings

$750

Commercial terms

Built for clear expectations

Minimum commitment
3 months for monitoring
Billing
Monthly in advance
Asset overage
$100–$200 per additional 25 assets / month
Additional root domain
$150–$300 / month
Extra investigation
$110–$150 / hour
Urgent analyst review
$250 minimum
Cancellation notice
30 days
Default data retention
12 months

Founding-client offer

Limited availability: 15% off the monthly fee for the first three months in exchange for structured feedback and, where permitted, a testimonial. Onboarding remains at the listed price.

Before work begins

Scope and authority

Public-source research can still engage privacy, database, contractual and website terms. Every client scope records the authority, boundaries and handling rules that apply.

  • Legal client name and authorized contact
  • Confirmed organizations and root domains
  • Representation of ownership or authority
  • Permitted sources, methods and explicit exclusions
  • Reporting recipients and escalation procedure
  • Retention period and active-validation permissions

Final terms are documented in the engagement agreement. Qualified counsel should review agreements for the client's jurisdiction.

Need a different scope?

Tell us the decision this work needs to support.

Send the organization, domains, known context, deadline and required outcome. We will respond with a realistic scope, methodology and price.

Start a scoping conversation