What the pricing pages say
None of the ranked platforms shows a price on its own website. What they publish elsewhere differs, and it tells you how cost will scale.
- Investigations. Dropzone AI's base subscription covers up to 4,000 full investigations per year per AI analyst, with unlimited users. Cost scales with how many alerts you want fully investigated.
- Endpoints. Intezer prices two packages by endpoints with no volume fees. Cost scales with the size of your estate, not your alert volume.
- Marketplace list prices. Mate Security's AWS Marketplace listing shows $150,000 for a 12-month contract for its Mate Enterprise Tier, 7AI's shows $50,000 for a 12-month contract with custom pricing on request, and Exaforce lists an Agentic SOC Starter Pack at $75,000 per 12-month contract. None of these listings defines what the tier, contract or pack covers, so these are entry figures, not units. Mate says marketplace purchases can count toward AWS commitments, which matters if your company has committed cloud spend.
- Nothing. Several vendors' pricing addresses returned a not-found page when we checked.
Which unit suits a lean team?
If your alert volume is high and your estate is small, an endpoint unit is predictable. If your estate is large and your alerts are few, an investigation unit may be cheaper. If you want every alert investigated, an investigation unit grows with that ambition. The analyst hours calculator on this site shows how many investigations a year your queue implies.
What the trust pages say
Trust pages are where vendors list attestations and, increasingly, subprocessors.
- Mate's trust center lists ISO 27001:2022, SOC 2 Type II, HIPAA, CCPA and GDPR, and names Amazon Web Services and Google Cloud as cloud subprocessors.
- Torq lists SOC 2 Type 2, HIPAA, ISO 27001, ISO 42001 and German BSI C5.
- Prophet Security lists SOC 2 Type II, ISO/IEC 27001:2022 and ISO/IEC 42001:2023, dedicated single-tenant hosting with a bring-your-own-key option, and AWS processing in the United States, Germany, Switzerland or Japan.
- Conifers lists SOC 2 Type II and ISO/IEC 27001, with hosting on its own Azure or in the customer's Azure tenant, and publishes retention (24 months by default) and deletion (within two weeks of a written request) terms.
- 7AI lists a completed SOC 2 Type II audit.
- Intezer says it completed a SOC 2 Type II examination and hosts on AWS and Azure.
What to ask when nothing is published
- What is the pricing unit, and what counts as one unit?
- What happens to price if alert volume doubles?
- Which features or integrations cost extra?
- Is the platform single-tenant, multi-tenant, or deployable in our own cloud?
- Who are your subprocessors, and in which regions is our data processed?
- Can we see the SOC 2 report under NDA before the pilot?
Why this site scores it
Our pricing clarity criterion is worth 10%, and hosting and data handling another 10%. Neither decides whether a platform can do the work, but both decide how quickly a lean team can get a purchase approved.
A last check before the call
Write down your alert volume per day, the share you want fully investigated, your endpoint count and your cloud commitments. With those four facts in hand, any vendor can tell you which unit applies and roughly how it scales, and you can compare answers across vendors on the same basis rather than on headline discounts.