You pay for reports that leave the building.
Not for attacks detected, not for events your agents send, not for the ones we decide are too thin to send. A complaint that actually reaches an abuse desk is the only thing counted.
Plans
What the count does not include
Four things that look like they should cost you something and do not. Together they are most of what a noisy week produces.
- Repeats folded into a complaint already filed. One address hammering you all night is one report, not four hundred.
- Reports held because the attacker's address could not be proved. Nothing was sent, so nothing is counted.
- Anything addressed to a contact on your suppression list — a desk that bounced or complained is not retried, and not billed.
- Events your agents deliver that never become a report at all.
In every plan
The parts that keep you from accusing the wrong person are not a tier. Charging for them would mean selling a cheaper plan that is worse at being right.
- Held reports, and the evidence rules that decide what is too thin to send.
- The suppression list, and sending that pauses itself when too many reports bounce — the account owner is told why.
- An audit log that can be added to and never edited.
- Roles and invitations: owners and admins set policy, operators work the queue, viewers can look but not send.
- The live map, the agent, and every source it reads.
- One customer's reports unreachable from another's, enforced by the database rather than by remembering to filter.
When you reach a limit
The report waits. Reaching the daily allowance moves it to tomorrow; reaching the monthly one moves it to the next month. Nothing is dropped and nothing is quietly discarded, and the console shows what is left before you get there.
If a month is consistently busier than the plan it sits in, that is a conversation rather than an overage charge.
Start with one server
Register a host, run the installer the portal gives you, and leave it for a day. Whatever your firewall catches tonight is a complaint that gets filed by morning.