Pricing & Plans
Validation that fits how you operate.
Whether you run an internal security program, partner with clients, or want SCYTHE to manage it all — there's a model built for your team.
How pricing works
No seat taxes. No agent limits. No hidden overages.
SCYTHE pricing is scoped to your environment and deployment model, not the number of users who log in or agents you deploy. Enterprise licenses are all-inclusive. Partner models are structured to protect your margins. Managed engagements are delivered on a cadence you define.
Talk to our team to scope the right model. Every engagement starts with a 30-minute discovery call.
Enterprise Platform
One price. Everything included.
Unlimited seats, agents, modules, and emulations — scoped to your environment size.
Enterprise organizations get full access to the SCYTHE platform with no artificial limits on how your team operates. Four tiers are structured by environment complexity, not seat count. Every tier includes the full feature set — the same emulation engine, the same ATT&CK coverage, the same integrations.
Tier 1
Foundation
Mid-market organizations building an internal AEV program for the first time.
✓ Unlimited seats & agents
✓ Full ATT&CK module library
✓ Full integration support
✓ Continuous scheduled campaigns
✓ Cloud & hybrid environment support
✓ Standard onboarding & support, including SCYTHE Cares
Tier 2
Advanced
Enterprises with active red, blue, or purple team programs expanding into continuous validation.
✓ Everything in Foundation
✓ AI-driven dynamic test generation
✓ CTI-to-emulation workflow
✓ Air-gapped environment support
✓ Priority support + dedicated CSM
Tier 3
Enterprise
Large enterprises with complex IT, cloud, and OT/ICS environments requiring full-spectrum coverage.
✓ Everything in Advanced
✓ OT/ICS agentless deployment
✓ IT/OT hybrid deployment support
✓ SIEM rules validation and testing
✓ Agentic workflow threat emulation
Tier 4
Global Enterprise
Critical infrastructure operators and global enterprises with multi-region, multi-sector validation requirements.
✓ Everything in Enterprise
✓ Custom SLA & white-glove onboarding
✓ Joint threat intelligence integration
✓ Named executive sponsor
All enterprise tiers are custom-quoted based on environment scope. Contact us for a discovery call.
Talk to SalesConsulting Partner Model
Built for firms that deliver security outcomes.
Regional boutiques and global practices. One model that scales with your engagements.
Consulting organizations use SCYTHE to deliver adversarial emulation and validation services to their clients. The consulting license is structured around engagement delivery — not seat counts or per-client fees that punish growth. Your margin is protected by design.
Regional Consulting
Boutique & Regional Firms
Purpose-built for security consultancies delivering red team, purple team, or adversarial validation services within a defined geography or market segment.
✓ Named practitioner operator licenses
✓ Client-isolated campaign workspaces
✓ Full ATT&CK library + campaign builder
✓ SCYTHE partner portal + training access
Pricing based on practitioner count & engagement volume
Global Consulting
Big Four & Global Practices
For large professional services firms integrating SCYTHE into a global advisory or managed security practice. Designed for multi-team, multi-country deployment with centralized governance.
✓ Everything in Regional Consulting
✓ Global multi-practice licensing
✓ Centralized admin & audit trail
✓ Joint go-to-market & co-sell support
✓ Executive alignment & roadmap access
Custom framework — contact our partner team
MSP / MSSP Model
Your revenue grows. Your costs stay manageable.
We don't force you to pay for everything upfront. Structure costs the way your business actually works.
The SCYTHE MSP/MSSP model separates your fixed platform investment from variable project-level usage — so you're not subsidizing clients before you've billed them. Platform access and support are predictable. Deployment and emulation costs flex with your pipeline.
Fixed Component
Platform & Support
Your annual platform license and support contract. Predictable. Budgetable. Covers your core operational infrastructure regardless of active client count.
✓ Platform access for all operators
✓ Annual support & maintenance
✓ Platform updates & new modules
✓ Partner portal & training
Variable Component
Project Deployment
Client-specific deployment and emulation usage, billed as you activate each engagement. Align your cost recognition to your revenue recognition — not your forecast.
✓ Per-engagement activation
✓ Client-isolated environments
✓ Full campaign + reporting access
✓ Usage accrues across the contract year
Why it matters
Protect your margin. Scale confidently.
Traditional platform pricing forces you to pre-buy capacity for clients you haven't signed yet. SCYTHE's split model means you can commit to the platform without committing to a client book that doesn't exist.
As your pipeline grows, your variable cost grows with it — and your fixed cost stays flat. That's how you build margin into your AEV practice from day one.
Managed Services
All the outcomes. None of the overhead.
SCYTHE practitioners run your TTX, PTEs, and AEV program — on a cadence you define.
Not every team has the bandwidth or headcount to operate a continuous AEV program internally. Managed Services delivers fully-staffed red team, tabletop, and purple team engagements on a structured schedule — so your team gets the results without running the program.
Managed Tabletop Exercises
Facilitated TTX sessions designed for your threat landscape, delivered by SCYTHE practitioners. Align leadership and security teams on incident response roles and decisions before the pressure is real.
✓ Scenario design & facilitation
✓ Quarterly or annual cadence options
✓ Executive-ready debrief & action plan
Managed Purple Teaming
SCYTHE practitioners deliver structured purple team exercises on a bi-annual to monthly schedule. Real technique execution, real detection feedback, real improvement — without building an internal program from scratch.
✓ ATT&CK-mapped technique execution
✓ Detection gap identification & tuning
✓ Cumulative coverage heatmap
Managed AEV
Continuous adversarial emulation, fully managed by SCYTHE. We operate the platform, run the campaigns, monitor the results, and report on your detection coverage — on whatever schedule your risk posture demands.
✓ Fully staffed SCYTHE practitioner team
✓ Defined monthly or quarterly cadence
✓ Continuous ATT&CK coverage reporting
✓ Gap remediation guidance included
Cadence options
Managed engagements are available monthly, quarterly, bi-annually, or on a custom schedule. Pricing reflects engagement frequency and scope — you're never locked into a cadence that doesn't match your program maturity.
Model Comparison
Which model fits your team?
| Enterprise | Consulting | MSP / MSSP | Managed | |
|---|---|---|---|---|
| Runs own campaigns | ✓ | ✓ | ✓ | — |
| SCYTHE-delivered engagements | — | — | — | ✓ |
| Unlimited seats & agents | ✓ | ✓ | ✓ | N/A |
| Client-isolated workspaces | — | ✓ | ✓ | ✓ |
| Split fixed / variable billing | — | — | ✓ | — |
| OT / ICS support | ✓ | ✓ | ✓ | ✓ |
| Defined engagement cadence | — | — | — | ✓ |
Get Started
Ready to see what your controls actually catch?
Book a 30-minute demo. We'll run a live emulation against a technique relevant to your industry — and show you exactly where your gaps are.
All pricing is custom-quoted based on environment scope and deployment model. Contact us for a scoping conversation.
Know exactly what your EDR is, and isn't detecting.
Book a demo and see SCYTHE run a validation campaign against your EDR environment. We'll show you your actual MITRE ATT&CK coverage, your false negative rate, and your first regression risk areas.