From
€4,000
excl. VAT / web application
Same starting price for a Microsoft 365 / Entra ID tenant (€4,000 excl. VAT). Final price set at scoping, based on scope and complexityPentest from €4,000 excl. VAT, SOC from €5.80 excl. VAT per user per month (€100 minimum), security policy from €1,875 excl. VAT with SOC Premium on a 12-month commitment.
Assess
To put your security to the test: application, network or Microsoft 365 penetration testing
From
€4,000
excl. VAT / web application
Same starting price for a Microsoft 365 / Entra ID tenant (€4,000 excl. VAT). Final price set at scoping, based on scope and complexityMonitor
To improve your security over time: three tiers on the Microsoft security stack, Microsoft 365 remediation included
Commitment
From 10 to 5,000
Monitors Microsoft 365, at the leanest price
€5.80
excl. VAT / user / month
€290 per month excl. VAT for 50 users
25% off the PSSI on a 12-month commitment
Monitors your whole estate and hunts threats
€15
excl. VAT / user / month
€750 per month excl. VAT for 50 users
50% off the PSSI on a 12-month commitment
We tune your security, you stay in control
€30
excl. VAT / user / month
€1,500 per month excl. VAT for 50 users
75% off the PSSI on a 12-month commitment
Price list, excluding Microsoft licenses; Sentinel ingestion included from Standard within the cap. The free audit confirms the tier and the number of users.
Frame
To earn the trust of your customers and suppliers: your security policy written with your teams
Range
€7.5–20k
excl. VAT / engagement
€7,500 up to 50 users, €15,000 up to 150, €20,000 aboveWith a 12-month SOC commitment: 25% off with Basic, 50% with Standard, 75% with PremiumProof
What falls outside the standard scope, so there are no surprises.
Microsoft licenses
Billed separately
Microsoft 365 and Microsoft security licenses: billed at catalog cost, with CSP optimization as an indirect Microsoft partner.
Azure consumption
Beyond the cap
From SOC Standard, Sentinel ingestion is included up to the cap; beyond it, rebilled at cost after your approval. On SOC Basic, Sentinel is an option billed by Azure.
Hardware
Not provided
Workstations, servers, network equipment: the client's responsibility.
On-site interventions
Billed additionally
Billing based on distance and duration of the intervention.
Fixes outside Microsoft 365
On quote
Business applications, servers or equipment outside the Microsoft 365 perimeter: fixed by your IT team or on quote.
Pentest beyond scoping
On quote
Applications, APIs or networks added after scoping: priced separately, before execution.
End-user support
Not provided
Office support, telephony, user requests: we work with your IT team, not in its place.
GDPR compliance
Not provided
Records of processing, impact assessments, DPO: for your DPO or a specialist firm. We assess the security posture.
Any service outside the scope can be added on quote, always approved by you before execution.
Short answers on billing, the contract and how it runs.
Microsoft Sentinel is cloud-native: no servers to manage, capacity that follows your log volume, and native integration with Microsoft 365. Sentinel is also named a Leader in the 2025 Gartner Magic Quadrant for SIEM.
Your data stays in your own Azure tenant, in the region of your choice: no copy on our side. We access it through delegated rights you can revoke at any time. Who can access it, and from where, depends on the coverage tier you choose: see our Sovereignty page for the details.
They are two complementary ways to find your vulnerabilities, within our three services. Offensive Security penetration testing is a one-off offensive assessment: it reveals the flaws that can really be exploited and delivers a prioritized remediation plan; the retest, included within 60 days, then checks that the fixed flaws really are fixed. The 24/7 SOC continuously detects threats and vulnerabilities in your Microsoft environment, and all three of its tiers include fixing vulnerabilities on the Microsoft 365 perimeter, with every fix we apply validated by an expert. The PSSI sets the rules that hold over time. As a principle, we recommend having an independent provider pentest an infrastructure we monitor: whoever protects it should not assess its own work. If you prefer to entrust both to DMC DEFENSE, we will do it.
Total portability, written into the contract. Only one month's notice. All your data, detection rules and playbooks stay in your tenant. We support you through the transition.
Initial deployment typically takes 2 to 4 weeks depending on complexity: Sentinel configuration, connectors, base rules, team training.
No: compliance remains your responsibility. Our offers assess and strengthen your security posture, the technical part these texts require (GDPR art. 32, NIS2 art. 21). Records of processing, impact assessments and the DPO are not part of our offers.
We recommend at least one penetration test per year, plus one after any major change (new application, redesign, significant release). The retest is included: within 60 days of the report, we check that the fixed flaws really are fixed.
Yes, with no commitment: an expert scopes your need and assesses your exposure, depending on the case on the pentest, your Microsoft 365 posture or the PSSI. You get a reply within 24 business hours of your request.
No hidden fees: you pay the price list; the only additions are Microsoft licenses and, beyond the ingestion cap, Azure consumption after your approval. Penetration testing is billed per engagement, from €4,000 excl. VAT for a web application or a Microsoft 365 tenant, retest included within 60 days; the final price is set once the scope is defined. The SOC is billed per user, from €5.80 per user per month excl. VAT, with a minimum billing of €100 per month per company, with no commitment; a 1-year commitment gives 10% off, a 2-year one 20% off, and if you terminate early the remaining months to term are due. The PSSI is billed as a complete engagement, from €7,500 to €20,000 excl. VAT depending on the organisation's size, discounted for SOC subscribers on a 12-month commitment: 25% off with Basic, 50% with Standard, 75% with Premium (from €1,875 excl. VAT). Microsoft licenses are billed separately (at optimized CSP rates); from Standard, Sentinel ingestion is included up to €2 excl. VAT of Azure consumption per user per month, beyond that rebilled at cost after your approval. SOC setup is included. On-site interventions, custom development or ad-hoc audits are quoted, always approved by you before execution.
€7,500 to €20,000 excl. VAT for the complete engagement, depending on the organisation's size and scope (up to 50 users: €7,500, up to 150: €15,000, above: €20,000), discounted for SOC subscribers on a 12-month commitment: 25% off with Basic, 50% with Standard, 75% with Premium (from €1,875 excl. VAT): 7 steps with your teams, a PSSI in 7 chapters, an IT acceptable use policy, a GDPR roadmap, a prioritised action plan and a regulatory obligations matrix, all included in the price. Optional yearly review, ordered each year and never renewed automatically: 15% of the base price, i.e. €1,125 excl. VAT per year up to 50 users, €2,250 up to 150, €3,000 above; 5% for SOC subscribers on a 12-month commitment (€375, €750 and €1,000 excl. VAT).
By default, the 24/7 SOC has no lock-in period: cancel any time with one month's notice, with full portability of your data, detection rules and playbooks in your own Azure tenant. If you choose a 1- or 2-year commitment (10% or 20% off), the remaining months to term are due if you terminate early. The penetration test and the PSSI are one-off engagements billed per mission: they end with delivery of the report or document, with no renewal and no notice period to give.
No. Scope, timing and scenarios are agreed with you beforehand. Exploitation stays controlled and non-destructive, with a permanent point of contact during the engagement. If you prefer, tests can be run on a pre-production or dedicated environment.
It scopes the work and assesses your exposure; the tier comes after.
Need a custom offer? Large enterprise, regulated sector, specific needs.
Reply within 24 business hours
An expert reads your request and gets back to you to qualify your need.
Free audit
On Microsoft 365: a one-hour audit of your tenant's posture (Secure Score, identities, Defender) and your priority flaws. Otherwise: we scope your need (pentest, security policy) and set the price. No commitment.
Dedicated contact
The same DMC expert follows you end-to-end, with no call-center in between.