Early access to Mitigate has startedRead the introduction →
Mitigate
Book a demo
Pricing

Two plans, counted by endpoints and analysts. Data volume is not on the bill.

Each plan connects to your current tools and reads evidence in place. Nothing gets copied out.

Plan 1

Investigate

Search, hunt and ask questions across every connected tool.

  • Plain-language searchType a question and Mitigate queries each integration in turn. Every answer links to the results it came from.
  • Scheduled huntsAgents look through your telemetry on a schedule for activity no rule caught.
  • Relevant intelCurrent campaigns and techniques, ranked by how exposed your estate is to each.
  • Custom agent tasksDefine your own multi-step tasks on the same runtime Mitigate's agents use to query and act through your integrations.
Get a quote for Investigate →
Plan 2

Respond

Alert handling, detection and containment on top of investigation.

All of Investigate, and

  • Alert triage and containmentEach alert is worked to a verdict that cites its evidence. Containment steps pass through your gates before they run.
  • Adaptive detectionsDetections that reason about behavior, catch what fixed rules miss, and adjust when your estate changes.
  • Ticketing and wiki linksCases sync with your ITSM queue, and agents read your internal runbooks and wiki.
Get a quote for Respond →
01Add-ons

Optional extras

Managed retention
We store and index security data you want to keep. Choose a hot or cold tier for each source.
On-prem connector
A small service inside your network that lets Mitigate reach internal tools. Their APIs stay closed to the internet.
Analyst services
Our analysts can take over context tuning, hunts, rule writing and regular reports for you.
Small team package
One fixed price for smaller security teams, in place of per-endpoint pricing.
02Quote

Describe your estate

Plan
Add-ons
Count laptops, desktops, servers and cloud VMs.<500
0<50025,00050,000+
People who work alerts or build detections.1
011020+

Sending this form means you accept our privacy policy.

03Questions

Pricing questions

What determines the price?

Two numbers: endpoints covered and security headcount. Log volume and retention size are not part of it.

Do we need new tools to use either plan?

No. Both plans connect to what your team runs today and read evidence where it sits, so no new data store is required.

Can integrations begin without write access?

Yes. Every integration is read-only first. You grant write access per action, and anything destructive is gated by default.

What about tools that sit on our internal network?

The on-prem connector add-on gives Mitigate a path to internal systems without opening their APIs, and our on-prem deployment option covers estates that mix cloud and local infrastructure.

Get a number in one business day.

Tell us your endpoint count and team size. The quote is built on those two figures and nothing else.

Get a quoteBook a demo