01 · Pricing

No pitch. Just numbers.

DHRUVA ships in three tiers. Self-hosted, every one of them. No agent limits, no alert quotas. Community is free forever. Team is where most security teams land. Enterprise is for mature programs. Every price on this page is published, with no contact-sales wall.

FreeCommunity, forever, self-hosted
$999Team, per month, or $9,990 a year
$2,999Enterprise, per month, annual
100%Yours, self-hosted, no lock-in
Free · self-hostedFree forever

Community

Freeforever

Start without a conversation.

Evaluators · small teams · researchers
▸AI alert triage with confidence scoring
▸Asset, identity, historical and time-context enrichment
▸Composite risk scoring
▸Incident lifecycle plus analyst notes
▸MITRE ATT&CK heatmap and gap analysis
▸7 free Tier-1 TI feeds
▸LLM prompt anonymization · JWT auth · 2 roles
Users5
AgentsUnlimited
Alerts / dayUnlimited
Default · mid-marketMost land here

Team

$999/month
Rs 83,000/mo · or $9,990/yr annual, save 2 months

Your Wazuh, but actually working.

Security teams at 50 to 250 person orgs
▸Everything in Community
▸Detection Agent, rule tuning proposals plus Sigma import
▸Natural language SIEM queries
▸Feedback loop auto-tune
▸Slack, email and ticketing (Jira, ServiceNow, PagerDuty)
▸Reporting, PDF plus HTML · 4 roles plus full audit
▸All 17 dashboard tabs · 1 Tier-2 TI feed of your choice
Users25
AgentsUnlimited
Alerts / dayUnlimited
Mature orgs · annualAnnual only

Enterprise

$2,999/mo · annual
Rs 2,50,000/mo starting · custom quotes for scale

Full autonomous SOC.

Orgs 500+ · formal program · compliance audits
▸Everything in Team
▸Threat Hunt Agent, hypothesis-driven
▸Active Response, 9 actions · SOAR, 11 playbooks
▸Vulnerability management plus remediation
▸Compliance frameworks (CIS, PCI, HIPAA, NIST, ISO)
▸Multi-tenancy · data governance · SSO/SAML on the roadmap
▸Fernet encryption · dedicated support with SLA
UsersUnlimited
AgentsUnlimited
TenantsUnlimited
Annual prepayPay annual, get two months free.Team annual $9,990/yr, saves $2,010 · Enterprise annual only
What you would pay elsewhere

Team is $9,990 a year. Here is what the alternatives cost.

Typical pricing for commercial AI SOC platforms with comparable features. Most hide the exact number behind "contact sales." These ranges are what companies we talk to report paying. Their data goes to someone else's cloud. Yours stays home.

Market rate readout
Enterprise AI SOC platforms$60,000+per year, starting
Commercial SIEM plus SOAR bundles$120,000+per year, typical
Cloud-native SIEM plus XDR suites$50,000+per year, comparable
Mid-market SIEM with basic AI$24,000+per year, SIEM only
02 · The full matrix

Every feature. Every tier. No surprises.

What is in, what is not. If a feature is not on this list, it is probably on the roadmap. Ask us.

Feature
Community
Team
Enterprise
Core triage
AI alert triage with confidence scoring
✓
✓
✓
Asset, identity, historical enrichment
✓
✓
✓
Composite risk scoring
✓
✓
✓
Incident lifecycle plus analyst notes
✓
✓
✓
MITRE ATT&CK heatmap plus gaps
✓
✓
✓
Knowledge base with full-text search
✓
✓
✓
Detection + investigation
Detection Agent (rule tuning)
·
✓
✓
Natural language SIEM queries
·
✓
✓
Feedback loop auto-tune · Sigma import
·
✓
✓
Threat Hunt Agent (hypothesis-driven)
·
·
✓
Response + automation
Active Response (9 actions)
·
·
✓
SOAR playbooks (11 automated)
·
·
✓
Vulnerability management plus remediation
·
·
✓
Compliance + governance
Compliance frameworks (CIS, PCI, HIPAA)
·
·
✓
Compliance matrix (NIST, ISO mapping)
·
·
✓
Data governance plus ILM retention
·
·
✓
Fernet envelope encryption
·
·
✓
Integrations + ops
Slack plus email notifications
·
✓
✓
Jira · ServiceNow · PagerDuty
·
✓
✓
Reporting (PDF, HTML)
·
✓
✓
Pipeline health monitoring
·
✓
✓
Advanced metrics (MTTD, MTTR, SLA)
·
·
✓
Webhook ingestion (HMAC)
·
·
✓
Threat intel
7 free Tier-1 TI feeds
✓
✓
✓
1 Tier-2 feed of your choice
·
✓
·
All Tier-2 feeds (AbuseIPDB, OTX, VirusTotal, EPSS)
·
·
✓
Auth + multi-tenancy
JWT plus 2 roles (analyst, read-only)
✓
·
·
4 roles plus full audit logging
·
✓
✓
SSO / SAML
-
-
Roadmap
Multi-tenancy (org-level isolation)
·
·
✓
Limits
Users
5
25
Unlimited
Agents
Unlimited
Unlimited
Unlimited
Alerts / day
Unlimited
Unlimited
Unlimited
Support
Community
Email · 1 biz day
Dedicated · SLA
03 · The old way vs this

Same outcome. A fraction of the cost.

What matters
The old way
Secure Sleuths
Cost
Rs 40 to 60L a year for five analysts, or $50,000+ a year in vendor licensing.
Free to $2,999/mo, self-hosted.
Setup
Three to six months hiring, or two to four months of vendor rollout.
About 5 weeks, or self-deploy Community free today.
Who runs it
You manage five people, or a vendor runs it remotely.
Your team, plus the AI.
Data
Shared with, or living inside, someone else's cloud.
100% yours, self-hosted.
No Wazuh yet?

SOC Setup. We build it, then hand you the keys.

A complete Wazuh SIEM deployment for teams that do not have one yet. Server, indexer, dashboard, custom decoders for your stack, tuned rules, a compliance evidence framework, and DHRUVA Community installed on top ready to upgrade.

$3,299starting · one-time · about 5 weeks
Noise Teardown$297
60-minute live review

We review your setup live and hand you a written one-pager. Credits toward your first month.

Guided Pilot$1,500
Team features in 14 days

We deploy Team-tier features on your Wazuh in 14 days. Credited toward annual.

04 · Expert services

Priced the honest way.

Some work is scoped per project, not per seat. The same operators who build the platforms deliver it.

SVC-01

Penetration Testing

Manual, human-led testing with a grounding receipt on every finding.

project-based
SVC-02

Smart Contract Audit

Line-by-line review before code holds real money. Foundry PoC per bug.

project-based
SVC-03

SOC Training

Build an enterprise SOC from zero. 20 sessions plus 2 months platform access.

Rs 44,999
05 · Honest answers

Questions people actually ask.

Does Community ever expire? +
No. Community is free forever with no trial limits. The only thing it lacks is the ops layer in Team, rule tuning, natural language queries, SOAR and the rest. Run it indefinitely if that is all you need.
Can I run Team on my existing Wazuh? +
Yes. All three tiers are self-hosted on your Wazuh. No migration, no vendor lock-in. If you leave, the keys come with you.
Is there a trial for Team? +
Community is the trial. Same platform, same core triage engine. You evaluate that first, then upgrade when you need rule tuning, hunting or automated response. Want hands-on help? A Noise Teardown is $297 and credits toward your first month.
Why is Enterprise annual-only? +
Enterprise buyers procure annually anyway, and annual contracts reduce churn risk on our side. If you need monthly for a specific reason, talk to us. We are flexible but default to annual.
Can I upgrade or downgrade mid-contract? +
Upgrade anytime, credited prorated. Downgrade at renewal. On annual and your scope changes a lot? We work with you.
What about MSSP or white-label pricing? +
Separate conversation. Partners get a revenue-share model with multi-tenant licensing, custom branding and deployment support. Contact us directly.
Ready when you are

Three paths. Pick one.

Free download, start a trial, or book a call. No pitch decks, no qualification forms, no "we will circle back."