Skip to content

Your security, priced for your size. And cheaper with the SOC.

Pentest from €4,000 excl. VAT, SOC from €5.80 excl. VAT per user per month (€100 minimum), security policy from €1,875 excl. VAT with SOC Premium on a 12-month commitment.

Assess

Offensive Security

To put your security to the test: application, network or Microsoft 365 penetration testing

Tested scope

  • Web & SaaS applications
  • Microsoft 365 and Entra ID
  • Exposed APIs and services
  • Network infrastructure
  • Social engineering (optional)

Methodology

  • PTES & OWASP standards
  • Testing led by our pentesters
  • Controlled exploitation of flaws
  • Retest included within 60 days

Deliverables

  • Detailed CVSS report
  • Prioritized remediation plan
  • Debrief with your teams
  • Penetration test certificate

Monitor

24/7 SOC

To improve your security over time: three tiers on the Microsoft security stack, Microsoft 365 remediation included

Your price by commitment and number of users

Commitment

From 10 to 5,000

  1. SOC Basic

    Monitors Microsoft 365, at the leanest price

    €5.80

    excl. VAT / user / month

    €290 per month excl. VAT for 50 users

    25% off the PSSI on a 12-month commitment

    • 24/7 monitoring of the Microsoft 365 perimeter, via Lighthouse (no Azure cost) or Microsoft Sentinel (Azure pay-as-you-go, billed separately)
    • Incident response (contractual SLA)
    • Remediation of vulnerabilities on the Microsoft 365 perimeter
    • Escalation to our L2/L3 experts
    • Monthly reporting
    • Audit of your Microsoft 365 every 3 months
  2. SOC Standard

    Monitors your whole estate and hunts threats

    €15

    excl. VAT / user / month

    €750 per month excl. VAT for 50 users

    50% off the PSSI on a 12-month commitment

    • Everything in Basic +
    • 24/7 Microsoft Sentinel monitoring (full SIEM)
    • Proactive threat hunting
    • Automated SOAR playbooks
  3. SOC Premium

    Recommended

    We tune your security, you stay in control

    €30

    excl. VAT / user / month

    €1,500 per month excl. VAT for 50 users

    75% off the PSSI on a 12-month commitment

    • Everything in Standard +
    • Personalized security roadmap
    • Dedicated crisis war room
    • Configuration of your Microsoft 365 security: Intune, Entra ID, Purview
    • Overall security posture

Price list, excluding Microsoft licenses; Sentinel ingestion included from Standard within the cap. The free audit confirms the tier and the number of users.

Conditions

Minimum
€100 excl. VAT per month and 10 users
Extra
Microsoft licenses
Ingestion
Included from Standard up to €2 excl. VAT of Azure consumption per user per month; beyond that, rebilled at cost after your approval. On Basic, Sentinel is an option billed by Azure
Setup
Included, no deployment fee
Engine
SOC Basic: Lighthouse (no Azure cost) or Sentinel, your choice. Sentinel by default from SOC Standard
Payment
Monthly, no lock-in · −10% 1-year commitment · −20% 2-year commitment · a further −15% with annual payment (one-shot), combinable with a 1- or 2-year commitment
Commitment
On a 1- or 2-year commitment, the remaining months to term are due if you terminate early
SOC
Security center that protects your business 24/7
SIEM
System that collects and analyzes all security alerts
SOAR
Automation: the system reacts on its own to known threats
Threat hunting
Proactive search for hidden threats by our experts
Playbook
Automatic response procedure for a type of attack
Lighthouse
Microsoft 365 multi-tenant management console, no Azure cost

Frame

Security policy & governance

To earn the trust of your customers and suppliers: your security policy written with your teams

Range

€7.5–20k

excl. VAT / engagement

€7,500 up to 50 users, €15,000 up to 150, €20,000 aboveWith a 12-month SOC commitment: 25% off with Basic, 50% with Standard, 75% with Premium

The 7 steps

  • Legislation and governance
  • Main risks and threats
  • Maintaining security condition
  • Authentication and access control
  • Fine-tuning and system hardening
  • Network segmentation
  • Logging and incident management

Method

  • 7 steps, 20 to 30 h of work, video-call sessions
  • 10 to 12 weeks, indicative durations at no extra cost
  • Themes covered in a set order
  • Validation at each step
  • Optional yearly review: 15% of the base price (5% for SOC subscribers on a 12-month commitment)

Deliverables

  • PSSI in 7 chapters and 5 annexes
  • IT acceptable use policy
  • GDPR roadmap
  • Prioritized action plan
  • Regulatory obligations matrix
  • Binding document for your organisation

Our commitments

Detection
< 15 min
24/7 monitoring on all three SOC tiers
Handling
< 30 min
On SOC Standard and Premium, in the event of an attack
Commitment
No lock-in
Monthly SOC, 1-month notice, full portability
Frameworks
NIS2 · GDPR · ANSSI
Cited as context, not as a status

Proof

  • Microsoft Partner · Indirect CSP
  • 100+ CVEs credited to our pentesters
  • Data in your tenant

What is not included

What falls outside the standard scope, so there are no surprises.

  • Microsoft licenses

    Billed separately

    Microsoft 365 and Microsoft security licenses: billed at catalog cost, with CSP optimization as an indirect Microsoft partner.

  • Azure consumption

    Beyond the cap

    From SOC Standard, Sentinel ingestion is included up to the cap; beyond it, rebilled at cost after your approval. On SOC Basic, Sentinel is an option billed by Azure.

  • Hardware

    Not provided

    Workstations, servers, network equipment: the client's responsibility.

  • On-site interventions

    Billed additionally

    Billing based on distance and duration of the intervention.

  • Fixes outside Microsoft 365

    On quote

    Business applications, servers or equipment outside the Microsoft 365 perimeter: fixed by your IT team or on quote.

  • Pentest beyond scoping

    On quote

    Applications, APIs or networks added after scoping: priced separately, before execution.

  • End-user support

    Not provided

    Office support, telephony, user requests: we work with your IT team, not in its place.

  • GDPR compliance

    Not provided

    Records of processing, impact assessments, DPO: for your DPO or a specialist firm. We assess the security posture.

Any service outside the scope can be added on quote, always approved by you before execution.

Important information

  • Pentest: from €4,000 excl. VAT per web application or Microsoft 365 tenant, per engagement · SOC: prices excl. VAT per user per month · PSSI: price excl. VAT for the complete engagement
  • Microsoft licenses not included, billed separately; Sentinel ingestion included from Standard up to €2 excl. VAT per user per month; SOC setup included
  • Minimum billing: €100 excl. VAT per month per company
  • Coverage terms specific to each regime are set in the contract
  • Your data stays in your tenant, in your region, with no copy on our side. See the Sovereignty page

Frequently asked questions

Short answers on billing, the contract and how it runs.

  • Microsoft Sentinel is cloud-native: no servers to manage, capacity that follows your log volume, and native integration with Microsoft 365. Sentinel is also named a Leader in the 2025 Gartner Magic Quadrant for SIEM.

  • Your data stays in your own Azure tenant, in the region of your choice: no copy on our side. We access it through delegated rights you can revoke at any time. Who can access it, and from where, depends on the coverage tier you choose: see our Sovereignty page for the details.

  • They are two complementary ways to find your vulnerabilities, within our three services. Offensive Security penetration testing is a one-off offensive assessment: it reveals the flaws that can really be exploited and delivers a prioritized remediation plan; the retest, included within 60 days, then checks that the fixed flaws really are fixed. The 24/7 SOC continuously detects threats and vulnerabilities in your Microsoft environment, and all three of its tiers include fixing vulnerabilities on the Microsoft 365 perimeter, with every fix we apply validated by an expert. The PSSI sets the rules that hold over time. As a principle, we recommend having an independent provider pentest an infrastructure we monitor: whoever protects it should not assess its own work. If you prefer to entrust both to DMC DEFENSE, we will do it.

  • Total portability, written into the contract. Only one month's notice. All your data, detection rules and playbooks stay in your tenant. We support you through the transition.

  • Initial deployment typically takes 2 to 4 weeks depending on complexity: Sentinel configuration, connectors, base rules, team training.

  • No: compliance remains your responsibility. Our offers assess and strengthen your security posture, the technical part these texts require (GDPR art. 32, NIS2 art. 21). Records of processing, impact assessments and the DPO are not part of our offers.

  • We recommend at least one penetration test per year, plus one after any major change (new application, redesign, significant release). The retest is included: within 60 days of the report, we check that the fixed flaws really are fixed.

  • Yes, with no commitment: an expert scopes your need and assesses your exposure, depending on the case on the pentest, your Microsoft 365 posture or the PSSI. You get a reply within 24 business hours of your request.

  • No hidden fees: you pay the price list; the only additions are Microsoft licenses and, beyond the ingestion cap, Azure consumption after your approval. Penetration testing is billed per engagement, from €4,000 excl. VAT for a web application or a Microsoft 365 tenant, retest included within 60 days; the final price is set once the scope is defined. The SOC is billed per user, from €5.80 per user per month excl. VAT, with a minimum billing of €100 per month per company, with no commitment; a 1-year commitment gives 10% off, a 2-year one 20% off, and if you terminate early the remaining months to term are due. The PSSI is billed as a complete engagement, from €7,500 to €20,000 excl. VAT depending on the organisation's size, discounted for SOC subscribers on a 12-month commitment: 25% off with Basic, 50% with Standard, 75% with Premium (from €1,875 excl. VAT). Microsoft licenses are billed separately (at optimized CSP rates); from Standard, Sentinel ingestion is included up to €2 excl. VAT of Azure consumption per user per month, beyond that rebilled at cost after your approval. SOC setup is included. On-site interventions, custom development or ad-hoc audits are quoted, always approved by you before execution.

  • €7,500 to €20,000 excl. VAT for the complete engagement, depending on the organisation's size and scope (up to 50 users: €7,500, up to 150: €15,000, above: €20,000), discounted for SOC subscribers on a 12-month commitment: 25% off with Basic, 50% with Standard, 75% with Premium (from €1,875 excl. VAT): 7 steps with your teams, a PSSI in 7 chapters, an IT acceptable use policy, a GDPR roadmap, a prioritised action plan and a regulatory obligations matrix, all included in the price. Optional yearly review, ordered each year and never renewed automatically: 15% of the base price, i.e. €1,125 excl. VAT per year up to 50 users, €2,250 up to 150, €3,000 above; 5% for SOC subscribers on a 12-month commitment (€375, €750 and €1,000 excl. VAT).

  • By default, the 24/7 SOC has no lock-in period: cancel any time with one month's notice, with full portability of your data, detection rules and playbooks in your own Azure tenant. If you choose a 1- or 2-year commitment (10% or 20% off), the remaining months to term are due if you terminate early. The penetration test and the PSSI are one-off engagements billed per mission: they end with delivery of the report or document, with no renewal and no notice period to give.

  • No. Scope, timing and scenarios are agreed with you beforehand. Exploitation stays controlled and non-destructive, with a permanent point of contact during the engagement. If you prefer, tests can be run on a pre-production or dedicated environment.

A free audit first. You choose afterwards, with no commitment.

It scopes the work and assesses your exposure; the tier comes after.

Need a custom offer? Large enterprise, regulated sector, specific needs.

After you send it

  1. Reply within 24 business hours

    An expert reads your request and gets back to you to qualify your need.

  2. Free audit

    On Microsoft 365: a one-hour audit of your tenant's posture (Secure Score, identities, Defender) and your priority flaws. Otherwise: we scope your need (pentest, security policy) and set the price. No commitment.

  3. Dedicated contact

    The same DMC expert follows you end-to-end, with no call-center in between.