Pricing
Always transparent pricing
No contracts, capacity planning or price modeling. Pay only for what you use. Get started now with the full-featured free tier.
Scalable & Secure
Sensors
- Collect data & respond to threats in real-time
- Detect & respond at wirespeed (isolate host from the network, kill a process tree, etc.)
- 70+ events (EDR sensors)
- Send commands, deploy payloads & collect artifacts (EDR sensors)
- Gain network visibility without SSL interception (Chrome OS sensor)
- Collect data from any external source, including third-party EDR
- Normalized and searchable telemetry
- 1 year full telemetry storage
Sensor Type | Billed on | Cost |
|---|---|---|
Windows | Quota | $2.5 /sensor /month |
Linux | Quota | $2.5 /sensor /month |
macOS | Quota | $2.5 /sensor /month |
Docker | Quota | $2.5 /sensor /month |
VMWare Carbon Black EDR | Quota | $0.5 /sensor /month |
Chrome OS | Quota | $0.25 /sensor /month |
CrowdStrike | Usage basis | $0.15 / GB* |
Syslog | Usage basis | $0.15 / GB* |
Amazon AWS CloudTrail Logs | Usage basis | $0.15 / GB* |
Google Cloud Platform (GCP) Logs | Usage basis | $0.15 / GB* |
1Password | Usage basis | $0.15 / GB* |
Microsoft /Office 365 | Usage basis | $0.15 / GB* |
Windows Event Logs | Usage basis | $0.15 / GB* |
Microsoft Defender | Usage basis | $0.15 / GB* |
Duo | Usage basis | $0.15 / GB* |
Slack | Usage basis | $0.15 / GB* |
GitHub | Usage basis | $0.15 / GB* |
ArcSight Common Event Format (CEF) | Usage basis | $0.15 / GB* |
Other external sources | Usage basis | $0.15 / GB* |
*billed once (at ingestion) and includes one year of full telemetry storage |
Log & Artifact Ingestion
Bring in external artifacts into LimaCharlie
- Logs sent seamlessly from the endpoint agent
- Logs manually uploaded via API or Python SDK
- IOCs indexed enabling search and D&R rules
$0.01 /3.5 GB /day
User defined retention periodExternal Outputs
Send data to any external destination
- Control what data you want to send (all telemetry, detections, etc.)
- Choose the granularity of data to send
- Transfer data to any external destination, real-time
- Free to transfer data to the Google Cloud Storage
$0.12 /GB
Free for transfers to GCSExtensions
Enhance the product functionality by leveraging LimaCharlie’s extensions
- Access threat feeds and pre-built API integrations
- Leverage a wide range of third-party services like vt, atomic-red-team, yara and more!
Full listing available here: Add-on Marketplace
Varies
Most are free
Chad Morris
CISSP, RedLeggPricing That Works For You
LimaCharlie users have multiple billing options available to them, depending on their unique needs.
Additionally, LimaCharlie offers pricing packages, volume discounts, and pure usage-based billing. Please contact us for details or to help estimate your deployment cost.
Frequently Asked Questions
How can I estimate the cost of my deployment?
To quickly estimate your deployment cost, please use our pricing calculator or book a call with our team.
Do I need to sign a contract?
No. LimaCharlie is a Security Infrastructure as a Service (SIaaS) provider so you don’t need to sign contracts or do capacity planning. You are billed month to month and you only pay for what you use.
What payment methods do you accept?
Most customers leverage our self-serve functionality and use their credit card to sign up. For organizations with large deployments, we also offer ACH and other payment methods - please contact us for details.
Is there a cancellation fee?
No. You can downgrade your quota and cancel your account at any time. You will only be billed for the services you’ve used.
Do you offer volume discounts?
Yes. Please contact us for details.
What is “pure usage billing”?
Complementary to our per-endpoint and usage-based pricing, LimaCharlie offers pure usage billing at base price $0.02 per endpoint per month. Please contact us for more information and to get a new organization set up for usage-based billing. Read more about it here.
Do you offer any private cloud options?
Yes, private cloud options available at negotiated prices. Please contact us for more information.
What options do you offer to users of LimaCharlie that manage multiple organizations?
By default, every organization is billed using a credit card set at the individual organization level. The billing cycle for each organization starts at the time the organization goes from the free tier into a paying tier. The invoices go to the email address of the user who initially created the organization. All the options described below apply based on the “billing domain”, which is the domain name of the email address of a user. For example, the users ceo@mycorp.com and sales@mycorp.com both belong to the mycorp.com billing domain.
Centralized Billing: Centralized Billing allows you to override the email where each individual organization’s invoice goes to. Instead of the email of the creator, a central email address (like billing@mycorp.com) is used. As a side-effect, billing domains with centralized billing enabled will receive a monthly report summarizing all organizations under the domain and their respective billing.
Global Billing Cycle: All organizations created by a billing domain will have their billing cycles on the same day, regardless of the creation time or the time the organization first exited free tier.
Manual Invoicing: Organizations in a billing domain will have their invoices sent manually by email without the use of a credit card. This will then allow the recipient to pay invoices using ACH or credit card, but this will have to be done manually each month.
Unified Billing: Instead of receiving one invoice per organization, all invoices for a billing domain will be aggregated together under a single invoice sent manually monthly.