Mahoney Control Pricing
Transparent net pricing for the Unified Risk, Operations & Growth Control Surface. All prices are net USD and apply to business customers only. Billing is monthly.
Mahoney Control — Platform
Four license tiers — from growing mid-market teams to international enterprise architecture.
Essential
Your entry point to the Unified Surface — for teams up to 5 users.
- Dashboard, Devices & Staff, Incidents, Governance and Billing
- 5 users included — add-on users from $29 per user per month
- 1M events / month included (fair use) — surcharge only for heavy SIEM ingestion
- Unified incident feed from RMM and EDR telemetry
- Evidence pipeline for governance reports
- Standard email support
Professional onboarding available
Professional
Full module depth with API access for growing security teams.
- All standard modules plus advanced reports
- 15 users included — add-on users from $25 per user per month
- 1M events / month included (fair use) — surcharge only for heavy SIEM ingestion
- API access and Security Financials
- Cloud Posture Monitoring
- Priority support
Professional onboarding available
Enterprise
Enterprise-grade scale with dedicated CSM and Mahoney Grow included.
Minimum annual commitment: $89,988
- Full scope of all platform modules
- 50 users included — add-on users from $19 per user per month
- 1M events / month included (fair use) — surcharge only for heavy SIEM ingestion
- Dedicated Customer Success Manager
- Custom integrations and contractual SLA
- Mahoney Grow (Technical + Business ROI) included
Professional onboarding available
Platform, SOC and AI analytics in a single monthly package price — the simplest way to start.
Growth Bundle
The compact start: platform, SOC and AI actions in a single bundled price.
Includes:
- Essential
- Core Shield
- Insight Pack
Professional Bundle
The most frequent entry into the full Unified Surface.
Includes:
- Professional
- Advanced Guard
- Intelligence Pack
Enterprise Bundle
Enterprise configuration with a dedicated threat team and unlimited AI.
Includes:
- Enterprise
- Enterprise Threat Ops
- Command Pack
Managed SOC
Add-on to Mahoney Control platform. 24/7 human-led detection and response — with contractually committed MTTR. Monthly environment flat fee, independent of headcount.
Core Shield
24/7 human-led detection — your entry point to managed SOC.
- 24/7 human-led detection and triage
- Log aggregation and SIEM correlation
- Up to 100 endpoints included — overage at $35 per endpoint
- Maps controls against ISO 27001, NIS 2 and SOC 2
- MTTR < 4 hours, contractually committed
Advanced Guard
Proactive threat hunting with full incident response ownership.
- All Core Shield services
- Incident response ownership by Mahoney analysts
- Proactive threat hunting
- EDR management and endpoint isolation
- Quarterly executive threat briefing
Enterprise Threat Ops
Dedicated threat operations for large attack surfaces.
- All Advanced Guard services
- Up to 750 endpoints included — overage at $30 per endpoint
- Custom playbooks and IR runbooks
- Audit-ready evidence against SOC 2 Type II and DORA
- MTTR < 1 hour, contractually committed
MIT-AI — AI Analytics & Co-Pilot
Add-on to Mahoney Control platform. The primary usage meter: one AI action equals one Co-Pilot query, one automated report or one risk analysis. Unused actions roll over up to 90 days. An AI action (analysis) is not an Automated Remediation (executed action) — separate meters.
Insight Pack
AI action pack for standard analyses and automated reports.
- 500 AI actions per month
- Standard analyses and automated reports
- Short Co-Pilot queries
- Rollover of unused actions up to 90 days
Intelligence Pack
Full Co-Pilot for risk analysis and growth insights.
- 2,500 AI actions per month
- Full Co-Pilot
- Risk analyses and prioritized recommendations
- Growth insights from Mahoney Grow
- Rollover of unused actions up to 90 days
Command Pack
Unlimited AI operations for portfolio-wide automation.
- Unlimited AI actions
- Full AI operations and custom reports
- Automations and API integration
- Enterprise automation
- Included in the Security OS tier
Automated Remediation
Add-on to Mahoney Control platform. Client-approved, executed fixes directly in the source platform (Microsoft 365, RMM, EDR) — billed per executed action. A remediation (executed action) is NOT an AI action (analysis) — separate meters.
Per Remediation
A single reviewed, reversible write action after client approval.
- One reviewed, reversible action (reclaim a license, disable an inactive account, start an approved patch job)
- Executed only after explicit client approval
- Every action is audited; reversible actions can be rolled back
- Destructive actions are never automated
- A remediation is not an AI action — separate meters
Automation Pack 50
For active fleets with steady hygiene work.
- 50 remediations per month (approx. $2.98 per action)
- Every action client-approved and audited
- Reversible actions can be rolled back; destructive actions are never automated
- A remediation is not an AI action — separate meters
Automation Pack 200
For highly automated MSP operations.
- 200 remediations per month (approx. $2.50 per action)
- Every action client-approved and audited
- Reversible actions can be rolled back; destructive actions are never automated
- A remediation is not an AI action — separate meters
For complex enterprise landscapes with individual requirements.
Security OS
All-inclusive architecture for complex enterprise landscapes — platform, SOC and AI in a single monthly flat fee.
- All platform modules, no restrictions
- 1M events / month included (fair use) — surcharge only for heavy SIEM ingestion
- SOC Core Shield included
- MIT-AI Command (unlimited AI actions) included
- vCISO quarterly briefing
- Unlimited users and dedicated delivery team
Board-Level Security Program
Executive-level SOC with a dedicated analyst team and red team integration.
- Dedicated analyst team and vCISO
- Custom endpoint volume
- MTTR < 30 minutes, contractually committed
- Board reporting and red team integration
- Custom playbooks and quarterly executive briefing
The first 1,000,000 events per month are included (fair use) — virtually every client stays below it. A tiered fee applies only to heavy raw-log / SIEM ingestion (premium add-on).
What are platform data events?
An event is one processed security or operational signal — from RMM, EDR, SIEM or PSA. Up to 1,000,000 events per month are included; usage-based value comes from AI Actions and Automated Remediation, not from raw events.
Budget Cap — no surprises
Every tenant has a configurable monthly hard limit. When reached, processing pauses automatically until the next billing cycle. No unexpected costs.
Right-sizing in 3 months
Month 1: conservative estimate. Month 2: live data and variance analysis. Month 3: optimization to your actual consumption pattern. We guide the entire process.
Usage & tiering: included, surcharge only for heavy SIEM ingestion
| Volume (Events / Month) | Price | Note |
|---|---|---|
| 0 – 1,000,000 | Included | Included — covered by platform license |
| 1,000,001 – 50,000,000 | $0.10 / 1.000 Events | Standard tier |
| 50,000,001 – 200,000,000 | $0.08 / 1.000 Events | Volume tier |
| Over 200,000,000 | $0.05 / 1.000 Events | Enterprise tier |
Additional consultant days: $1,500 / day · Travel expenses billed separately at cost.
Questions about events or fair use?
Talk to usFrequently Asked Questions
Can I change tiers later?
What happens if I cancel?
Do you offer annual billing?
What payment methods do you accept?
Are there setup fees?
Are custom enterprise agreements available?
Your data stays yours · Security operations since 2018 · Data residency EU / US / Asia — your choice · Your tools stay yours
ISO 9001:2015 certified by DEKRA (Germany) · 24/7 SOC operations
Questions about pricing?
30 minutes. No sales pitch — just an honest walkthrough of the tier that fits your setup.
Talk to usAll prices net. No hidden fees. Event usage protected by per-tenant budget caps — no unexpected invoices.
All prices are net USD, exclusive of applicable sales tax. Offer directed at business customers only. We do not enter into contracts with consumers.
Professional onboarding is optionally available. Scope and terms are based on your existing IT infrastructure and determined individually during initial consultation.
Mahoney Control maps customer controls against these frameworks. This does not constitute certification of Mahoney IT against these standards. Certification is awarded by independent auditors.
Managed SOC, MIT-AI and Automated Remediation are add-on modules and require an active Mahoney Control platform license.