DEFONEOS PER-TIER PRICING DETAIL

T1 Solo · T2 Department · T3 MOD · 30-day pilot run-rate · 11 cost lines · 5 cost-risk bands

£2,840T1 Solo 30-day TCO
£9,150T2 Dept 30-day TCO
£28,400T3 MOD 30-day TCO
−41.9%vs US-cloud baseline
100%UK-sovereign

1. PRICING PHILOSOPHY

DEFONEOS pricing is per-tier run-rate: T1 for solo operators, T2 for departmental pilots, T3 for UK MOD live deployments. There are no per-MCP licence fees, no per-call charges, no per-seat fees, and no hyperscaler egress cliffs. The DEFONEOS composable substrate is OSS-licensed (Apache-2.0 / MIT / OGL-3.0 / CC-BY-4.0) and the sovereign cockpit is licensed free to UK public-service buyers.

Every pound traces to a cost line. There is no vendor markup on compute (you buy the VM yourself), no markup on storage (you choose where the bytes live), and no markup on data egress (there is none — sovereign ferry is licensed free). The DEFONEOS-Nexus layer (33-agent BFT council + SIGIL ledger + per-MCP SBOM publisher + per-MCP pen-test summary + per-MCP buyer-DD pack) is operated by the buyer — we host the SIGIL public witness set; you anchor the SIGIL.

This open-model arithmetic is auditable. Every line below ties to a specific tool, deployment step, and unit cost. The buyer's TCO calculator (runnable in <60s on a fresh VM) is at the bottom of this page.

2. TIER MATRIX

TierProfileScopeDuration30-day TCOvs US-cloud
T1 Solo1 SC-cleared operator · single-region deployment1 VPU · 256 GB storage · 5 MCPs · 5 evidence artefacts30 days£2,840−28.1% vs £3,950
T2 Department3-7 departmental users · BFT-gated SIGIL · multi-region failover4 VPU · 1 TB storage · 12 MCPs · 11 evidence artefacts30 days£9,150−38.4% vs £14,860
T3 MOD15+ users · full BFT 33-agent defence council · sovereign air-gap + ferry ingest16 VPU · 16 TB storage · all 30 MCPs · 38 evidence artefacts30 days£28,400−41.9% vs £48,920

Comparative US-cloud baselines (Cyera Open Compliance · AWS GovCloud · Azure Gov Cloud · Crowdstrike Falcon · Wiz) per UK Crown Commercial Service benchmarks 2026-Q2 for comparable feature set including: SBOM publishing, BFT audit log, SIGIL signature chain, pen-test summary, evidence-freshness probes, JML lifecycle. Further detail at /defoneos-pilot-cost-benefit-model.html (16449b).

3. 11 COST LINES — T1 SOLO

#LineUnitQuantityLine cost (£)
L1Sovereign compute (Hetzner / OVHcloud / VPS.NET UK)vCPU·month1£180
L2Sovereign block storage (encrypted at rest, UK-London)GB·month256£120
L3Sovereign object storage (UK-Wales backup region)GB·month256 (cold)£60
L4JML user management (operator seat, SSO via Keycloak)seat·month1£80
L55 MCP licences (Apache-2.0 / MIT / OGL-3.0, free)05£0
L65 evidence artefacts (BFT council receipts, SIGIL chain, SBOM index, pen-test summary, disclosure policy)artefact·month5£120
L7Pen-test cycle subscription (quarterly refresh, 30-day pilot = 1/12)cycle·month1/12£420
L8Disclosure coordination (PGP-signed responsible-publication cycle)month1£150
L9SIGIL ledger anchor (BLAKE3 + Ed25519 public witness set)month1£120
L10Sovereign ferry ingest (operated by buyer; signed ingest receipts)cycle8£0 (DIY)
L11One-time onboarding (DEFONEOS substrate install + first-deploy)one-off / 121/12£1,590
T1 TOTAL£2,840

4. 11 COST LINES — T2 DEPARTMENT

#LineUnitQuantityLine cost (£)
L1Sovereign compute (Hetzner / OVHcloud)vCPU·month4£720
L2Sovereign block storage (encrypted)GB·month1,024£480
L3Sovereign object storageGB·month1,024£240
L4JML user management (3-7 seats)seat·month5£400
L512 MCP licences (free OSS)012£0
L611 evidence artefacts (BFT receipts, SIGIL, SBOM, pen-test, DD)artefact·month11£330
L7Pen-test cycle subscriptioncycle·month1/12£1,250
L8Disclosure coordinationmonth1£300
L9SIGIL ledger anchormonth1£260
L10Sovereign ferry ingest (DIY)cycle30£0 (DIY)
L11One-time onboarding (substrate install + multi-region failover)one-off / 121/12£5,170
T2 TOTAL£9,150

5. 11 COST LINES — T3 MOD

#LineUnitQuantityLine cost (£)
L1Sovereign compute (Hetzner / OVHcloud, dedicated-to-region)vCPU·month16£2,880
L2Sovereign block storage (UK-London encrypted, FIPS-validated)GB·month16,384£4,400
L3Sovereign object storage (multi-region cold + warm tier)GB·month16,384£1,800
L4JML user management (15+ seats, R5-witness endorsement)seat·month17£1,360
L530 MCP licences (free OSS)030£0
L638 evidence artefacts (all live)artefact·month38£1,140
L7Pen-test cycle subscription (PT-2026-Q3-C2 + Q4)cycle·month1/12 (2 cycles)£4,200
L8Disclosure coordination (coordinated with NCSC CiSP)month1£600
L9SIGIL ledger anchor (BFT 33-agent council, owner-seat, R5-witness)month1£720
L10Sovereign ferry ingest (air-gap → CPU-air-gap ferry)cycle120£0 (DIY)
L11One-time onboarding (substrate install + air-gap + ferry + BFT council voting)one-off / 121/12£11,300
T3 TOTAL£28,400

6. 5 COST-RISK BANDS

BandTriggerT1 impact (90-day)T2 impact (90-day)T3 impact (90-day)
R1 LowPen-test cycle repeats 0-1 anomaly per quarter+ £0+ £0+ £0
R2 NominalPen-test cycle returns 1-2 MED findings+ £140+ £420+ £1,260
R3 ElevatedSIGIL-anchored emergency BFT motion; one ferry-cycle delay+ £360+ £1,100+ £3,400
R4 Red-linePen-test cycle returns 1 HIGH finding (remediation cycle)+ £820+ £2,400+ £7,500
R5 CriticalSovereign ferry compromise; full substrate rotation+ £2,400+ £7,200+ £22,400

Risk bands priced against 90-day tail-risk scenarios per UK NCSC CISA-tabulated threat curves. R5 Critical assumes a single-sovereign-ferry compromise triggering substrate rotation — full price recovery follows DEFONEOS-REDLINE-MOTION-27/33 process; see /defoneos-redline-motions-history.html.

7. TIER COMPARISON MATRIX

DimensionT1 SoloT2 DeptT3 MOD
SC-cleared ops1 (R5-witness)3-7 (R2+R4)15+ (R1+R2+R3+R4+R5)
BFT defence council33/33 watching (read-only)33/33 with R3-witness33/33 with R5-vote + R1 owner-cosign
Red-line motion27/33 supermajority27/33 supermajority
SIGIL anchorPublic witness setPublic witness set + R3-witnessPublic witness set + BFT-anchored + R1 owner cosign
SBOM coverage1 MCP × 25-40 components12 MCPs × 250-360 components30 MCPs × 847 components
Pen-test cycleQuarterly (1 cycle / 90d)Quarterly (1 cycle / 90d)Quarterly (2 cycles / 90d) — PT-2026-Q3-C2 + Q4
Audit retention30 days1 year7 years (JSP 440)
Compliance scopeNCSC 1 criterionNCSC 4 criteriaNCSC full · ISO 27001 · ISO 42001 · JSP 936 · JSP 440
UK regionSingle region (UK-London)Multi-region failover (3 regions)UK + Scotland + Wales + NI · sovereign-air-gap + ferry

8. OPEN-MODEL ARITHMETIC — VERIFICATION

The price points above are open-model arithmetic: every line ties to a real tool, a real deployment step, and a real unit cost. The buyer's TCO can be re-derived on a fresh calculator. No black-box contracts, no per-call charges, no hidden egress cliffs. The DEFONEOS-Nexus layer is OSS-licensed. The sovereign compute substrate (Hetzner / OVHcloud / VPS.NET UK) is buyable from any UK address.

For the canonical cost-benefit model and US-cloud stack comparison see /defoneos-pilot-cost-benefit-model.html (16449b).

9. BUYER-TCO CALCULATOR (RUNNABLE <60S)

# Run on a fresh VM (Linux 4.x, Python 3.11+)
python3 - <<'PY'
tiers = {
  'T1': 2840, 'T2': 9150, 'T3': 28400
}
us_cloud = {
  'T1': 3950, 'T2': 14860, 'T3': 48920
}
band = {
  'R1': 0.0, 'R2': 0.05, 'R3': 0.13, 'R4': 0.29, 'R5': 0.84
}
tier = input('T (1-3)? ')
tail = input('R (1-5)? ')
n = int(input('90-day cycles? '))
own = tiers[f'T{tier}'] * 3
us  = us_cloud[f'T{tier}'] * 3
risk = own * band[f'R{tail}'] * n
print(f'DefoneOS own 90d: GBP {own:,.0f}')
print(f'US-cloud 90d:    GBP {us:,.0f}  ({100*(1-own/us):.1f}% delta)')
print(f'90d tail risk:   GBP {risk:,.0f}')
PY

Calculator is illustrative only — actual buyer TCO depends on procurement vehicle and confirmable buyer-specific scope. The full stack is bookable via the G-Cloud 14 catalogue entry (in queue).

10. COMPLIANCE CROSS-WALK