| MSSP Boost | MSSP Ultimate | |
|---|---|---|
| Pricing |
up to 100 assets $ 229 per month |
starts at 1000 assets $ Custom Talk to an Expert |
| Features | ||
| Perfect For | ||
| Hosting | ||
| AIR Core Comprehensive Evidence Acquisition (700+ evidence types), Advanced Threat Hunting with YARA, Sigma, osquery, interACT — Cross-Platform Remote Shell, Case Management, Investigation Hub, Advanced Timelining |
||
| Business Email Compromise Cross-platform evidence acquisition from Google Workspace and Microsoft 365. |
||
| SOC2 Compliant | ||
| Fleet AI Multi-Expert Agent System |
||
| Integrations The type of platforms you can integrate AIR with. |
||
| #Connections The number of platforms you can connect AIR to. |
||
| Evidence Retention The duration data is stored in hot storage, making it available for real-time investigations before being moved to cold storage. |
||
| Automation Hub | ||
| SSO | ||
| On-prem & Air-gapped | ||
Supercharge your MSSP Services. Right Here!
Scale investigations without complexity or hidden costs.
Trusted by Enterprises and Incident Responders Worldwide
Simple, transparent pricing
Save 10% on yearly plan!
MSSP Boost
Up to 100 assets$00 /month /month
What you get:
- Forms
- Team Email
- Contact Management
Basic
$68 /month /month
All Free features, plus:
- Contact Activity
- Team Email
- Document Management
Pro
$1216 /month /month
All Basic features, plus:
- Company Records
- Mobile App Integration
- Resource Allocation
Enterprise
$129149 /month /month
All Pro features, plus:
- Gmail Integration
- Calendar Integration
- Progress Tracking
MSSP Boost
Basic
Pro
Enterprise
Marketing
Sales
Integrations
MSSP Pricing FAQs
-
What packages are available for MSSPs?
We offer two packages tailored for Managed Security Service Providers (MSSPs):
- MSSP Boost – Entry-level, capped at 100 assets, self-hosted, with basic support.
- MSSP Ultimate – Full-scale MSSP solution with enterprise-grade automation, multi-tenant management, and unlimited scaling.
-
What packages can I purchase online?
You can buy MSSP Boost directly from our website and MSSP Ultimate via our sales team
- MSSP Boost – $229/month for up to 100 assets
- MSSP Ultimate – Begins at 1000 assets with custom quotes provided by our sales team
-
Who are these packages best suited for?
- MSSP Boost – Ideal for smaller teams who want to explore AIR’s capabilities, run pilot projects, or demonstrate value to customers before committing to a full deployment. It is limited in scale and designed as a stepping stone to MSSP Ultimate.
- MSSP Ultimate – Designed for service providers running managed SOC operations and Incident Response. It supports large-scale deployments, multi-tenant environments, advanced automation, and full support and training.
-
Can I manage multiple end customers?
Yes. With MSSP Ultimate, you can manage multiple tenants, each isolated to ensure strict separation of customer data. MSSP Boost does not include tenant segregation.
-
Can I segregate tenants for different end customers?
Yes. MSSP Ultimate provides full tenant segregation, ensuring each end customer has their own dedicated environment.
-
Is on-premise or air-gapped deployment available?
Yes. On-premise and air-gapped deployment options are available with MSSP Ultimate. MSSP Boost is self-hosted only.
-
How does deploying Binalyze to more assets work?
- MSSP Boost – Limited to 100 assets. It cannot be expanded further.
- MSSP Ultimate – Starts at 1000 assets and scales without limit. Assets can be allocated across multiple tenants to match the needs of each end customer. Contact sales to purchase additional assets
Q: What’s the minimum purchase?
- MSSP Boost – Capped at 100 assets.
- MSSP Ultimate – Starts at 1000 assets. Contact sales to purchase additional assets
-
What payment methods are supported?
-
MSSP Boost – Monthly credit card payments are accepted via Stripe.
-
MSSP Ultimate – Flexible monthly or annual billing options are available. Volume discounts apply. Contact our sales team.
-
-
Can I cancel at any time?
Yes. Subscriptions can be cancelled with notice. Your subscription remains active until the end of the billing cycle, with no further charges after that.
-
Where can I read the full Terms and Conditions?
You can review our full Terms and Conditions here for details on billing, cancellation, and acceptable use.
-
Are discounts available?
Yes. Discounts are available for annual billing and for volume commitments across multiple tenants.
-
Can I switch from MSSP Boost to MSSP Ultimate?
Yes. MSSP Boost is designed as a stepping stone. You can upgrade at any time to MSSP Ultimate for large-scale, production-ready deployments.
-
Is Binalyze compliant with SOC 2, ISO 27001, and GDPR?
Yes. Binalyze AIR SaaS is certified or aligned with:
-
SOC 2 Type II
-
ISO 27001
-
GDPR
You can read more on our Trust & Data Protection page.
-
-
What happens when my paid subscription ends?
You have 14 days to export your data. After this grace period, we permanently delete the data from our systems.
-
Where is my data stored and processed?
-
MSSP Boost – As a self-hosted deployment, the MSSP controls where data is stored and processed.
-
MSSP Ultimate – By default, Binalyze AIR SaaS is hosted on Amazon Web Services (AWS) in the us-east-2 (Ohio) region. For customers with data residency requirements, we can provision tenants across 30 different countries. For details, please speak to our sales teams.
We do not replicate or transfer forensic data outside your tenant’s region.
-
-
Do you back up my data across regions?
No. All forensic data remains in your tenant’s assigned region. Backup, failover, and disaster recovery are provided within that same AWS region.
-
Does Binalyze have access to my forensic data?
No. Your forensic evidence is encrypted and isolated within your tenant’s region. Binalyze cannot access or use this data unless you explicitly grant temporary access for troubleshooting. Any such access is time-limited and revoked as soon as the issue is resolved.
What our customers say about us...
Hear from the front-line defenders.
If I were to go anywhere and build a new security stack and defensive layer methodology, I know Binalyze AIR is going to be part of it.
Dane Zielinski
Information Security Manager at Transam
With AIR, when an incident happens, we get the answers.It’s as simple as that. We’re not just throwing alerts over the fence. AIR lets us deliver clarity.
Andrew Haslett
Director of Security Services at Novawatch
With AIR, we get the full picture—what executed, what moved, what was accessed—and that’s what helps us close investigations with confidence.
Christopher Clark
Incident Response Team Manager at Thrive
Cut weeks off your IR workflow.
Start your free trial today.
From signup to investigation in less
than 2 minutes.








