From
€4,000
excl. VAT / web application
Same starting price for a Microsoft 365 / Entra ID tenant (€4,000 excl. VAT). Final price set at scoping, based on scope and complexityYour security, priced for your size. And cheaper with the SOC.
Pentest from €4,000 excl. VAT, SOC from €5.80 excl. VAT per user per month (€100 minimum), security policy from €1,875 excl. VAT with SOC Premium on a 12-month commitment.
Assess
Offensive Security
To put your security to the test: application, network or Microsoft 365 penetration testing
Tested scope
- Web & SaaS applications
- Microsoft 365 and Entra ID
- Exposed APIs and services
- Network infrastructure
- Social engineering (optional)
Methodology
- PTES & OWASP standards
- Testing led by our pentesters
- Controlled exploitation of flaws
- Retest included within 60 days
Deliverables
- Detailed CVSS report
- Prioritized remediation plan
- Debrief with your teams
- Penetration test certificate
Monitor
24/7 SOC
To improve your security over time: three tiers on the Microsoft security stack, Microsoft 365 remediation included
Your price by commitment and number of users
Commitment
From 10 to 5,000
SOC Basic
Your Microsoft 365 monitored 24/7. At the entry price.
€5.80
excl. VAT / user / month
€290 per month excl. VAT for 50 users
25% off the PSSI on a 12-month commitment
- Your Microsoft 365 monitored 24/7, with Microsoft Sentinel (ingestion included)
- Detection in under 15 minutes
- The incident is handled by an analyst, at no extra charge
- We close the flaw, not just the alert, on Microsoft 365
- A written report every month
- An audit of your Microsoft 365 every 3 months
SOC Standard
A security advisor, not just monitoring.
€15
excl. VAT / user / month
€750 per month excl. VAT for 50 users
50% off the PSSI on a 12-month commitment
- Everything in Basic +
- Your security advisor, a monthly meeting and a steering committee every 3 months
- Tailored investigations of your environment (threat hunting)
- Handling in under 30 minutes
- Microsoft Sentinel as a full SIEM: your other sources can be connected to it
SOC Premium
RecommendedWe tune your security, you stay in control.
€30
excl. VAT / user / month
€1,500 per month excl. VAT for 50 users
75% off the PSSI on a 12-month commitment
- Everything in Standard +
- We tune your Microsoft 365: conditional access, device compliance, ASR rules, Purview
- A detection check every 6 months: we replay attacker actions to verify your settings hold
- A security roadmap written with you
- In a crisis, a dedicated war room
Price list, excluding Microsoft licenses; Sentinel ingestion included in all three prices within the cap. The free audit confirms the tier and the number of users.
Conditions
- Minimum
- €100 excl. VAT per month and 10 users
- Extra
- Microsoft licenses
- Ingestion
- Included in all three prices, up to €2 excl. VAT of Azure consumption per user per month; beyond that, rebilled at cost after your approval
- Setup
- Included, no deployment fee
- Engine
- Microsoft Sentinel, on all three tiers
- Payment and commitment
- Monthly, no lock-in · −10% on a 1-year commitment · −20% on 2 years · a further −15% with annual payment (one-shot), combinable with the commitment; if you terminate a commitment early, the remaining months to term are due
Frame
Security policy & governance
To earn the trust of your customers and suppliers: your security policy written with your teams
Range
€7.5–20k
excl. VAT / engagement
€7,500 up to 50 users, €15,000 up to 150, from €20,000 above, final price at scopingWith a 12-month SOC commitment: 25% off with Basic, 50% with Standard, 75% with PremiumMethod
- 7 steps, 20 to 30 h of work, by video call
- 10 to 12 weeks, indicative durations at no extra cost
- Optional yearly review: 15% of the base price (5% for SOC subscribers on a 12-month commitment)
Deliverables
- PSSI in 7 chapters and 5 annexes
- IT acceptable use policy
- GDPR roadmap
- Prioritized action plan
- Regulatory obligations matrix
- Binding document for your organisation
Our commitments
- Detection
- < 15 min
- 24/7 monitoring on all three SOC tiers
- Handling
- < 30 min
- On SOC Standard and Premium, in the event of an attack
- Commitment
- No lock-in
- Monthly SOC, 1-month notice, full portability
What is not included
What falls outside the standard scope, so there are no surprises.
Microsoft licenses
Billed separately
Microsoft 365 and security licenses, at catalog cost with CSP optimization.
Azure consumption
Beyond the cap
Sentinel ingestion included on all three tiers up to €2 excl. VAT per user per month; beyond that, rebilled at cost after your approval.
Hardware
Not provided
Workstations, servers, network: the client's responsibility.
On-site interventions
Billed additionally
Based on distance and duration.
Fixes outside Microsoft 365
On quote
Business applications, servers, equipment: your IT team, or on quote.
Pentest beyond scoping
On quote
Scope added after scoping: priced before execution.
End-user support
Not provided
We work with your IT team, not in its place.
GDPR compliance
Not provided
Records, impact assessments, DPO: for your DPO or a firm. We assess the security posture.
Any service outside the scope can be added on quote, always approved by you before execution.
Frequently asked questions
Short answers on billing, the contract and how it runs.
No hidden fees: you pay the price list, with Sentinel ingestion included on all three tiers up to €2 excl. VAT of Azure consumption per user per month. The only additions are Microsoft licenses and, beyond that cap, Azure consumption rebilled at cost after your approval. Minimum billing: €100 excl. VAT per month; on-site interventions and out-of-scope work are quoted, and approved by you before execution.
By default, the SOC has no lock-in: one month's notice, with full portability of your data, detection rules and playbooks in your Azure tenant. A 1- or 2-year commitment is optional (10% or 20% off); if you terminate early, the remaining months to term are due. The penetration test and the PSSI are billed per engagement, with no renewal and no notice period.
The SOC continuously monitors your Microsoft 365 and fixes its flaws; the penetration test is a one-off check that reveals the flaws that can really be exploited, retest included within 60 days. The two complement each other. As a principle, we recommend having an independent provider test an infrastructure we monitor: whoever protects it should not assess its own work; if you prefer to entrust everything to us, we will do it.
Initial deployment typically takes 2 to 4 weeks depending on complexity: Sentinel configuration, connectors, base rules, team training.
No: compliance remains your responsibility. Our offers assess and strengthen your security posture, the technical part these texts require (GDPR art. 32, NIS2 art. 21). Records of processing, impact assessments and the DPO are not part of our offers.
Your data stays in your own Azure tenant, in the region of your choice: no copy on our side. We access it through delegated rights you can revoke at any time. See the Sovereignty page
A free audit first. You choose afterwards, with no commitment.
It scopes the work and assesses your exposure; the tier comes after.
Need a custom offer? Large enterprise, regulated sector, specific needs.
After you send it
Reply within 24 business hours
An expert reads your request and gets back to you to qualify your need.
Free audit
On Microsoft 365: a one-hour audit of your tenant's posture (Secure Score, identities, Defender) and your priority flaws. Otherwise: we scope your need (pentest, security policy) and set the price. No commitment.
Dedicated contact
The same DMC expert follows you end-to-end, with no call-center in between.