🎉 Early-Bird Launch Offer — 50% Off EARLYBIRD Discounted rate stays while your subscription remains active

🛡️ SME Cybersecurity Plans

Cybersecurity that turns alerts into action.

Your own SOC — without building one.

CiBRAI gives smaller organisations a practical operating layer for detection, investigation, response and security management — in one secure, isolated workspace. Deploy a guided agent to Windows, macOS or Linux machines, and start building visibility today.

🚀 Get Started — Use Code EARLYBIRD Book a Walkthrough

🖥️ Windows · macOS · Linux

🔒 Isolated AU-hosted tenant

🤖 Agentic AI built-in

📋 Cancel anytime

Early-Bird Launch Pricing

Choose the level of coverage that fits today.

Use code EARLYBIRD for 50% off any self-service plan. The discounted rate stays in place while your subscription remains continuously active.

One operating model across the full cyber workflow.

CiBRAI connects detection, investigation, response and management activities so the evidence collected at the start of an incident remains available through containment, closure and reporting.

Step 01

🔍

Detect

Live SIEM alerts, endpoint activity, anomaly scoring and a prioritised threat queue.

Live SIEM alerts and event monitoring

Anomaly scoring and prioritisation

Health monitoring and asset visibility

Step 02

🔎

Investigate

Cases, threat intelligence, MITRE ATT&CK context, email analysis, timeline and evidence review.

Case and evidence management

MITRE ATT&CK mapping

Email and indicator analysis

Step 03

⚡

Respond

Tasks, approvals, playbooks, containment recommendations, remediation tracking and closure evidence.

Human-approved response actions

Automated playbooks (Growth+)

Full audit trail retained

Step 04

📊

Manage

Essential Eight reporting, risk and posture views, executive summaries and trend reporting.

Essential Eight reporting (Growth+)

Board-ready executive summaries

Control evidence and trend reporting

From sign-up to useful security in minutes.

Most organisations can connect the first supported machine quickly. Coverage expands as you tune and add devices.

First 15 Minutes

Your isolated tenant is provisioned. Confirm the primary administrator, notification address and basic workspace settings.

First Hour

Deploy the agent to initial Windows, macOS or Linux machines. Security events and asset context begin to arrive.

First Day

Review the first alerts, validate expected activity, invite additional users and establish initial notification rules.

First Week

Tune detections, confirm case workflows, review the first posture summary and decide which machines to add next.

Capability Matrix

Detailed plan comparison.

Core = available in plan. Enhanced = more automation, context or scale. Advanced = broader correlation and customisation. Scoped = defined in Enterprise order form.

Core operations

Capability	SME	Growth	Business	Enterprise
Monthly standard price	$1,990	$3,990	$6,990	Quoted
Early-bird monthly price	$995	$1,995	$3,495	Quoted
Monitored machines	Up to 10	Up to 25	Up to 50	51–250 standard scope
Windows, macOS and Linux agents	✓ Included	✓ Included	✓ Included	✓ Included
Isolated customer workspace	✓ Included	✓ Included	✓ Included	Dedicated or on-premise
Live SIEM alerts and event monitoring	Core	Core	Enhanced	Advanced / tailored
Agentic AI alert explanation	Core	Enhanced	Advanced	Custom workflows
Case and incident management	Core	Core	Enhanced	Advanced / tailored
Guided forensic investigation	Core	Enhanced	Advanced	Tailored
Core threat intelligence context	✓ Included	✓ Included	✓ Included	✓ Included
Human approval and action audit trail	✓ Included	✓ Included	✓ Included	Tailored RBAC
Support	Email + in-app	Priority	Priority + onboarding	Named engineer
Cancellation	Anytime	Anytime	Anytime	Order form

Intelligence, response and governance

Capability	SME	Growth	Business	Enterprise
Automated threat intelligence enrichment	On demand	✓ Included	Advanced	Private or custom feeds
MITRE ATT&CK mapping	Guided	✓ Included	Advanced	Tailored
Essential Eight reporting	Not included	✓ Included	✓ Included	Tailored compliance scope
Scheduled multi-agent reviews	Limited	✓ Included	Advanced	Custom schedules
AI-generated executive summaries	Core	Enhanced	Advanced	Tailored
Automated response playbooks	Not included	Guided	✓ Included	Custom
Custom detection rules	Not included	Standard library	✓ Included	Custom engineering
SSO and SAML	Not included	Not included	Optional	✓ Included / scoped
Dedicated tenancy or on-premise	Not included	Not included	Not included	✓ Available
Named security engineer	Not included	Not included	Onboarding session	✓ Included
Custom connectors and integrations	Add-on	Add-on	Add-on	✓ Included / scoped
Managed monitoring or DFIR service	Add-on	Add-on	Add-on	Scoped

💡 This matrix is a customer-facing guide. Confirm final inclusions, fair-use limits, retention, support SLAs and integration scope at checkout or during your onboarding conversation.

Clear Expectations Before You Subscribe

Frequently asked questions.

Everything you need to know before getting started.

Is this a fully managed 24x7 SOC service?

No. SME, Growth and Business are primarily self-service subscriptions. Managed monitoring, co-managed operations, incident response and DFIR services can be scoped separately.

What counts as a monitored machine?

One supported Windows, macOS or Linux endpoint or server with an active CiBRAI agent connected to your tenant. Final treatment of offline or retired machines is defined in the subscription terms.

Will CiBRAI replace our antivirus?

Not necessarily. CiBRAI provides monitoring, event correlation, investigation, cases, intelligence and response workflows. It is designed to work alongside existing endpoint protection and other security controls.

How does the AI make decisions?

Agents analyse the evidence and permissions available to your tenant, then explain findings and recommend next steps. High-impact actions are held for an authorised human decision and recorded in the audit trail.

What does the forensics capability include?

Operational investigation, evidence linkage, timelines, case notes, endpoint and log context, indicator enrichment and report export. Specialist acquisition, legal chain-of-custody and expert witness services are separate.

Where is our data kept?

The self-service plans are designed for isolated Australian-hosted tenancy. Enterprise customers can discuss dedicated and on-premise deployment. The final order form defines data location, retention and subprocessors.

Can we upgrade later?

Yes. Start with the machine count and capability level that fits today, then move to a larger plan as your environment, compliance obligations or response needs grow.

Can we cancel?

SME, Growth and Business are proposed as cancel-anytime subscriptions, subject to the final billing and cancellation terms. Enterprise arrangements are governed by the applicable order form.

🚀 Ready to start?

Begin building security visibility today.

Choose the plan that fits your current machine count, use code EARLYBIRD, deploy the first agent and start building visibility. For more complex environments, contact CiBRAI for a short scoping conversation.

Use code EARLYBIRD → 50% off, applies at checkout

🚀 Get Started Now Compare the Plans Book a Walkthrough

Choose your plan

Get started online →

Book a walkthrough

info@cibrai.com

Enterprise scoping

Dedicated and on-premise options — contact us to discuss