Burrow

Your security team

Your security team without hiring one: monitoring with a person, one audit of your website and servers a year, 6 hours of fixes a month and priority response. If you are attacked, the first day is on us.

Ears + Lop, one Dig a year, 6 h/month of Lop Fix and priority response, in a single monthly price. It costs less than those parts separately.

Duration: Month to month
Start: We start with your first audit as soon as you sign

US$1,290/mo

You save US$104 a month compared with buying the parts separately. By parts: Ears + Lop US$449, one Dig a year (US$4,500 spread over 12 months: US$375) and 6 hours of Lop Fix US$570. Total: US$1,394 a month.

Set up my Burrow

Is it urgent? Write to us and we will set up the start this week.

It is for you if

You want continuous security but you are not going to hire someone full time.
It suits you to have monitoring, an annual audit and fix hours in a single price.
You want someone to call when something is urgent.

What it includes

24/7 monitoring with a Lop who confirms every alert and tells you what to do.Ears + Lop: 24/7 monitoring, human alert triage and a quarterly retest.

A full audit of your website and servers once a year.One Dig a year: web app, external surface, email and Microsoft 365 or Workspace configuration.

6 hours of fixes a month, with every fix verified.6 h/month of Lop Fix: configuration, patches, hardening and code, with verification.

Priority response when something is urgent and a dashboard with everything together.Priority queue and a single dashboard with findings, alerts and reports.

How we work

At the start
Kick-off
We run the first audit of your website and servers and get the monitoring running.
Initial Dig and sign-up for 24/7 monitoring with domain verification.
Around the clock
Monitoring with a person
We watch your surface and a Lop confirms every alert before it reaches you.
24/7 monitoring with human triage and remediation advice per alert.
Every month
Fixes
A Lop fixes what is needed, up to 6 hours a month, and retests it.
6 h/month of Lop Fix on configuration, patches, hardening and code, with verification.
Once a year
Annual audit
We repeat the audit of your website and servers to see how everything changed.
One Dig a year, with a leadership and a technical report, and retests included.

What you get

24/7 monitoring with a Lop who confirms every alert.
Full Ears + Lop: 24/7 monitoring, human triage and a quarterly retest.
A full audit of your website and servers every year.
One Dig a year with its two reports and retests.
6 hours of fixes a month, with every fix verified.
6 h/month of Lop Fix with post-fix verification of each one.
Priority response and a dashboard with everything: findings, alerts and reports.
Priority queue and a single dashboard with findings, alerts, reports and attestations.

See a sample report

Scope limits

Includes

Monitoring with a person (Ears + Lop).Ears + Lop: 1 domain, up to 50 assets, human triage and a quarterly retest.
One Dig audit a year.One Dig a year, with the Dig scope (1 web app, up to 10 hosts, email and M365 or Workspace).
6 hours of Lop Fix a month.6 h/month of Lop Fix, with verification of each fix.
Priority response when something is urgent.Priority-queue attention ahead of standalone services.
If you are attacked, the first day of response is on us (one incident a year).First 8 h of Bounce free of charge on one incident a year; further hours at the Bounce rate.

Does not include

Unused fix hours do not roll over to the next month.The 6 h/month of Lop Fix do not accumulate between months.
Larger audits (Rabbit Hole, Warren) or ransomware (Hutch) are separate.The annual audit is a Dig. Rabbit Hole, Warren and Hutch are booked separately.

Burrow costs less than those parts separately. If you need more fix hours, you add them at the Lop Fix rate.

Questions before you buy

Why is it better than buying the services separately?

Because it bundles monitoring with a person, one Dig a year and 6 fix hours a month in a single price, cheaper than those parts separately, with priority response.

What if my company is bigger than a Dig?

The included annual audit is a Dig. If you need Rabbit Hole or Warren, we add them with a fixed quote and you keep the monitoring and the fixes.

How is it paid?

Monthly, and you cancel whenever you want. If you pay yearly, you get 2 months free.

Want a security team without hiring one?

Monitoring with a person, one audit a year, 6 hours of fixes a month and priority response, in a single price.