Four tiers.
EU-priced. Sovereign-ready.
From a single-team pilot to a full sovereign on-prem deployment for KII operators. Every tier ships the same QARS-NI engine — they differ in scope, automation and deployment model.
- Transit layer only
- Monthly automated scan
- QARS-NI score & PDF report
- Email support · 5×8
- EU-hosted (Vilnius)
- 14-day free trial
- All 3 layers · Transit + Use + Rest
- Weekly automated scans
- Per-asset QARS-NI breakdown
- Mosca analysis & recommendations
- Priority chat support · 5×12
- ISO 27001 / NIS2 export pack
- CBOM (CycloneDX 1.6)
- Continuous scanning
- SSO, RBAC, full audit log
- API access & SOC integration
- SIEM hooks (Splunk · Sentinel)
- 99.9% SLA · 24×7 support
- Dedicated CSM · QBR
- Custom remediation playbooks
- Self-hosted ICARUS agent
- Air-gapped mode supported
- Data residency: LT / EU only
- KTU research collaboration
- Custom QARS-NI calibration
- IEC 62443 / KII compliance
- Source-shipped for audit
See the quantum threat — live.
Executives don't just read about post-quantum risk — they watch it run, in real time, on a real quantum computer at KTU. The most convincing way to make the case for starting PQC migration today.
- Sector-specific Quantum Threat Timeline through 2036
- QARS Score with detailed report
- Live experiment on KTU SpinQ Gemini 2-qubit quantum computer
- Choose 1 of 3 — Bell State (entanglement), Deutsch–Jozsa, 2-qubit VQE
- Branded recording for internal presentations
- Live expert commentary throughout
- Everything in Premium Single — across 3 sectors
- 3 Quantum Threat Timelines & QARS reports
- 3 live experiments on KTU SpinQ Gemini
- Personal consultation with Prof. Dr. Šarūnas Grigaliūnas
- Branded recording for each sector
- Priority booking — typically within 2 weeks
Feature comparison.
| Capability | Starter | Pro | Enterprise | Sovereign |
|---|---|---|---|---|
| Transit layer probes | ● | ● | ● | ● |
| Use layer (runtime crypto) | — | ● | ● | ● |
| Rest layer (at-rest crypto) | — | ● | ● | ● |
| QARS-NI scoring | ● | ● | ● | ● |
| Mosca analysis | — | ● | ● | ● |
| Scan frequency | Monthly | Weekly | Continuous | Custom |
| CBOM (CycloneDX) export | — | ● | ● | ● |
| SSO / RBAC | — | — | ● | ● |
| SIEM / SOC integration | — | — | ● | ● |
| Air-gap deployment | — | — | — | ● |
| Source-shipped for audit | — | — | — | ● |
| Custom QARS-NI calibration | — | — | — | ● |
| SLA | Best-effort | 99.5% | 99.9% | Custom |
| Support hours | 5×8 | 5×12 | 24×7 | 24×7 + CSM |
Beyond the platform.
TIBER-LT integration
Combined cryptographic + threat-led red-team engagement aligned with TIBER-LT framework. Joint engagement with our red-team partners.
PQC migration consulting
Per-day expert engagement. Migration planning, hybrid TLS rollout, KMS rotation playbooks, executive briefings.
Custom subagent development
Bespoke subagents for proprietary platforms or unusual OS targets. Quoted per-engagement.
CISO training & certification
Two-day cryptographic readiness workshop for security teams. Co-delivered with KTU KSKC. Certificate of completion.
Common questions.
Is there a free trial?
Yes — Starter ships with a 14-day free trial; Professional with a 30-day free pilot for organisations with at least 50 assets.
How is data handled?
All data stays in EU (Vilnius). Sovereign keeps everything on-prem. Credentials are pulled from your vault at runtime — never stored.
Do you sign a DPA?
Always. We also sign a sovereignty addendum for Sovereign customers covering source escrow and audit rights.
Can I switch tiers?
Yes — upgrade any time, downgrade at the end of the billing cycle. Sovereign migrations are scoped per-engagement.
What payment methods?
Bank transfer (SEPA), invoice with NET-30 terms. Card payment for Starter. Annual contracts get a 15% discount.
Who owns my data?
You do. We are processors, not controllers. Audit data exports are available via API on every tier.