Pricing
Priced for your organization, not a template.
Vigile AI Enterprise is quoted per organization. Tell us how your Microsoft 365 estate is set up, and we will send a written quote that reflects it rather than asking you to infer your price from a tier table.
What to expect
- Quoted per organization, so the scope matches your tenant rather than a tier name.
- Your Microsoft licence tier is the floor. Anything it does not unlock is labelled, not hidden.
- One conversation, then a written quote.
- Nothing is charged until an order form is agreed.
Request a quote
Six fields, and an answer from someone who works on the platform.
Why there is no number here
One figure would be wrong for most tenants.
A published price is only honest if the product is the same for everyone. This one is scoped to your environment, so the quote is too.
Scale is not a price list
The platform runs across your whole tenant. Two organizations with the same headcount can need very different scope once guests, shared mailboxes and connected environments are counted.
Depth depends on your licence
Sign-in history needs Entra ID P1. Risk detections need P2. We quote for what your tier can actually deliver, and say plainly where a capability is out of reach.
Modules and services vary
Which areas you switch on first, and how much onboarding and support you want alongside them, changes the shape of the engagement more than a seat count does.
What shapes your quote
Six things, and you already know all of them.
Nothing here is a surprise line item. These are the inputs that change the scope, and therefore the number.
- 01
Microsoft 365 users in scope
The platform covers your whole tenant, so the number of employees, guests and shared mailboxes it assesses is the first thing that shapes a quote.
- 02
Your Microsoft licence tier
Sign-in history needs Entra ID P1. Risk detections, risk levels and risk states need P2. We quote for what your tier can deliver, and say plainly where a capability is out of reach.
- 03
Environments and monitored domains
One tenant or several, and how many domains you want watched for breach data, lookalike domains and subdomain exposure.
- 04
Modules you switch on
Identity and sign-in risk, data exposure, access governance, remediation and reporting, and breach and brand exposure can be sequenced, rather than all started on day one.
- 05
Onboarding and support
How much help you want connecting the tenant, tuning the scan policy, and training the teams who will work the findings.
- 06
Term, billing and procurement
Contract length, billing period, invoicing and purchase-order requirements, plus any security review or data processing agreement your process needs.
What Enterprise covers
The platform, not a cut-down tier.
Enterprise is organization-wide: findings are aggregated across your whole tenant and the domains you monitor, rather than scoped to a single domain.
Posture and organization
- Organization security score
- Employee directory with status, title, risk and MFA
- Groups and shared mailboxes
- Breach activity trend across 12 months
- Employee security graph
- Organization and MFA reports
Identity and sign-in risk
- Failed sign-in list with full context
- Most-targeted employees
- Named incidents: brute force, password spray, credential stuffing, ATO risk
- Attack metrics and geography
- Incident workflow from Open to Closed, plus Suppressed
- Incident summary and full status history
Apps, data and access
- App estate size, adoption and sign-in health
- Permission audit in plain language
- Data Intelligence scan of OneDrive and SharePoint
- Sharing states: Private, Users, Organization, Public
- Data Lifecycle Risk with 60, 90 and 120 day thresholds
- External Access review with a prioritised playbook
Remediation and reporting
- Cases created automatically from public and sensitive findings
- Risk KPIs including remediation rate and open-risk ageing
- Case queue with inline workflow
- Case timeline and suggested next steps
- Risk Intelligence export and per-case PDFs
- Reports catalogue and alerts
Breach and brand exposure
- Breach data with validation status
- Third party exposure
- Subdomain exposure
- Domain impersonation with IP, geolocation and name server
- Takedown requests with a tracked lifecycle
Platform and administration
- Read-only Microsoft 365 and Entra ID connection
- Automatic daily refresh, plus on-demand scans
- Roles and organization users
- Settings, security and two-factor authentication
- Searchable activity log
- Global search for exposed credentials and sensitive data
Microsoft licensing
Your licence is the floor, not the product.
Vigile AI Enterprise is licensed separately from Microsoft. What your tier unlocks is set out below, and anything outside your tier appears as a labelled panel that explains the upgrade, never a silent gap.
| Microsoft licence | What becomes available |
|---|---|
| Microsoft Free | Directory, employees, groups, OneDrive and SharePoint files, applications and permissions. |
| Entra ID P1 | Sign-in history and application sign-in activity. |
| Entra ID P2 | Risk detections, risk levels and risk states. |
How a quote is put together
From a form to a signed scope.
Four steps, and you can stop after any of them.
- Step 1
Tell us about your setup
The pricing request form asks for the few things that actually move the number: tenant size, licence tier, environments and the areas you care about first.
- Step 2
A scoping call
Thirty minutes with someone who works on the platform, so the scope is agreed against your environment rather than a brochure.
- Step 3
A written quote
Scope, term, fee and what is included, in a document your procurement process can act on.
- Step 4
Onboarding
Connect the tenant, tune the discovery policy, and get the first posture view in front of the people who will work it.
Pricing questions
What buyers ask before the quote.
Anything missing, ask it with the form. You will get an answer, not a brochure.
Because a single number would be wrong for most organizations. The scope of the platform depends on how many users you have, which Microsoft licence tier you hold, how many environments you want covered, and which areas you want switched on first. We quote your setup instead of asking you to infer it from a tier table.
Once the scoping call has happened, a written quote normally follows within a few business days. If your procurement process needs a security questionnaire, a data processing addendum, or vendor onboarding completed first, tell us on the call so it can run alongside rather than after.
Directory, employees, groups, OneDrive and SharePoint files, applications and permissions work on Microsoft Free. Sign-in history and app sign-in activity need Entra ID P1. Risk detections, risk levels and risk states need Entra ID P2. Anything your tier does not include appears as a labelled panel explaining what unlocks it, never a silent gap.
Yes. Most organizations start with the area that matches the pressure they are under, whether that is identity and sign-in risk, data exposure, or access governance, and add the rest once the first view is in use. Scope that sequence in the quote so the commercial terms match the rollout.
No. There is no agent to deploy and no data to migrate. An organization owner connects the Microsoft integration, which is read-only, and the platform reads from your tenant. The connection can be revoked at any time from your Microsoft admin portal.
They are inspected in memory to detect findings and are never stored or displayed. You see the finding category, the count and a confidence indicator. Private files are excluded from content detection by default unless you deliberately extend the scan policy.
Get a number that fits your tenant.
Send six fields and we will come back with scope, term and fee. If you would rather see the platform first, book the walkthrough and ask for pricing in the same session.